Credit and debit card info breached at Sonic

OKLAHOMA CITY, OK — Millions of credit and debit cards may have been compromised following a breach of store payment systems at Sonic Drive-In. Sonic officials do not know how many stores the breach affected.

The cards are reportedly being sold online in a batch of cards put up for sale Sept. 18. Sonic told KrebsOnSecurity it was notified last week of “unusual activity” on cards used at its businesses.

SONIC released the following statement:

“The security of our guests’ information is very important to SONIC. We are working to understand the nature and scope of this issue, as we know how important this is to our guests. We immediately engaged third-party forensic experts and law enforcement when we heard from our processor. While law enforcement limits the information we can share, we will communicate additional information as we are able.”

The company reports it is looking into the scope of the breach.