According to Earl Enterprises, there has been a data security incident potentially affecting payment card information of a limited number of guests of Earl of Sandwich, Planet Hollywood, and Chicken Guy. Guests who visited the following restaurants during the affected date ranges below should check their accounts for any suspicious activity:
- Planet Hollywood Observatory: 5/23/2018 – 3/18/2019
- Earl of Sandwich: 5/23/2018 – 3/18/2019
- Chicken Guy: 8/30/2018 – 3/1/2019
The malicious software was designed to capture payment card data, which could have included credit and debit card numbers, expiration dates and, in some cases, cardholder names.
According to Krebs on Security, over 2 million cards were impacted, including from the Disney Springs locations. The card data went on sale in late February, and it took over a month for Earl Enterprises to confirm the breach and respond.
For more information, guests can visit the Earl Enterprises incident report page: