Data Breach Affects 33 PF Chang’s Restaurants

P.F. Chang’s is providing more details on its ongoing investigation into a security breach, saying data may have been stolen from certain credit and debit cards used at 33 P.F. Chang’s China Bistro restaurants in the U.S.

P.F. Chang’s confirmed in June that data from credit and debit cards used at its restaurants was stolen, but didn’t specify the locations at that time. On Monday the company provided a list of locations. These include P.F. Chang’s restaurants in Baltimore; St. Louis; Pittsburgh; Austin, Texas; and Charlotte, North Carolina.

A list of all 33 locations, as well as the dates that cards may have been compromised, can be found at pfchangs.com/security. The company said that potentially stolen data includes the card number and may also include the cardholder’s name and/or the card’s expiration date in some instances.

P.F. Chang’s said that it’s continuously working to understand the nature and scope of the incident. It says the security compromise has been contained and that it has been processing credit and debit card data securely since June 11.

The restaurant operator noted that as the investigation continues it may identify other locations where data may have been compromised or other date ranges.

P.F. Chang’s China Bistro Inc., based in Scottsdale, Arizona, owns its namesake restaurants and Pei Wei Asian Diners. The company was taken private in 2012 by Centerbridge partners LP for about $1.1 billion.

Data breaches have occurred at other major U.S. corporations recently, including Target Corp., Neiman Marcus, Sally Beauty Holdings Inc. and Michaels Stores Inc.