Sunday, April 6, 2025
HomeCyber AttackFin7 Cybercrime Group Hacked Burgerville and Stolen Payment Card Details

Fin7 Cybercrime Group Hacked Burgerville and Stolen Payment Card Details

Published on

SIEM as a Service

Follow Us on Google News

The US food chain Burgerville was the recent victim of the notorious Fin7 hacker group. The hackers placed malware on Burgerville’s network and collect the payment card details.

Burgerville managed immediately to stop the breach and disable the malware with the help of third-party cybersecurity experts and in cooperation with the FBI.

Burgerville Security Breach

The US food chain company confirmed no other customers personal information was compromised and the company working with its employees to address the incident.

According to the company security breach release, the hackers stole customers’ credit and debit card information, including names, card numbers, expiration dates, and the CVV numbers.

The US food chain company confirmed no other customers personal information was compromised and the company working with its employees to address the incident.

The tactics of this particular group of hackers make it very difficult to know exactly how many people were directly affected and exactly which card numbers were stolen.

Burgerville request customers to monitor debit or credit card activity if you used the card in any one of the outlets between September 2017 and September 30, 2018.

The company said they will continue to work with its cybersecurity firm to evaluate and upgrade its security systems. Burgerville is the privately held American restaurant owned by The Holland Inc.

Related Read

Cyber Attack Hits SHEIN Fashion Retailer, More Than Affected 6.42 Million Customers

Best ways to Lock Down the Highly Sensitive Data From the Massive Breaches

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Ivanti Fully Patched Connect Secure RCE Vulnerability That Actively Exploited in the Wild

Ivanti has issued an urgent security advisory for CVE-2025-22457, a critical vulnerability impacting Ivanti...

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware

A concerning malware campaign was disclosed by the AhnLab Security Intelligence Center (ASEC), revealing...

EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures

EncryptHub, a rapidly evolving cybercriminal entity, has come under intense scrutiny following revelations of...

PoisonSeed Targets CRM and Bulk Email Providers in New Supply Chain Phishing Attack

A sophisticated phishing campaign, dubbed "PoisonSeed," has been identified targeting customer relationship management (CRM)...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Ivanti Fully Patched Connect Secure RCE Vulnerability That Actively Exploited in the Wild

Ivanti has issued an urgent security advisory for CVE-2025-22457, a critical vulnerability impacting Ivanti...

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware

A concerning malware campaign was disclosed by the AhnLab Security Intelligence Center (ASEC), revealing...

EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures

EncryptHub, a rapidly evolving cybercriminal entity, has come under intense scrutiny following revelations of...