The potential breach may have included names, credit card
numbers and their CVV security codes but not PIN numbers or
other sensitive customer information, the company said in a
statement.
The attack, discovered on April 3, was limited to credit or
debit card transactions between Sept. 3, 2014 and April 2, 2015,
at the company's restaurant, bar and retail locations, including
the Culinary Dropout Restaurant.
Transactions at the hotel, casino, Nobu, Affliction, John
Varvatos, Rocks, Hart & Huntington Tattoo or Reliquary Spa &
Salon were not affected, it said.
The company said it is actively cooperating with law enforcement
and credit card companies to investigate the attack.
(Reporting by Kshitiz Goliya in Bengaluru; Editing by Ken Wills)
[© 2015 Thomson Reuters. All rights
reserved.] Copyright 2015 Reuters. All rights reserved. This material may not be published,
broadcast, rewritten or redistributed.
|
|