Notice of Payment Card Incident
The Grill at Calvary Chapel Fort Lauderdale values its guests and understands the importance of protecting payment card information. On April 2, 2019, The Grill learned from its third-party point-of-sale (“POS”) solution provider, Pinnacle Hospitality Systems (“Pinnacle”), about a payment card security incident that involved numerous Pinnacle clients, including The Grill. This notice explains the incident, measures that have been taken, and some steps you can take in response.
Pinnacle launched an investigation of its systems after it received reports from the payment card networks that several merchants whose POS systems are all serviced by Pinnacle were suspected of having a security issue with their POS systems. Findings from Pinnacle’s investigation indicate that an unauthorized actor obtained access to a Pinnacle employee’s remote-service account and used the account to remotely access various Pinnacle clients’ POS systems, including The Grill, and to install malware designed to access payment cards used on POS devices. Pinnacle’s investigation identified the operation of this malware on POS devices at The Grill from July 23, 2018 to February 20, 2019. The malware searched for track data (which sometimes has cardholder name in addition to card number, expiration date, and internal verification code) read from the magnetic stripe of a payment card as it was being routed through the POS device. There is no indication that other customer information was affected.
Pinnacle has advised that the malware was removed from The Grill’s POS systems and that Pinnacle has taken steps to implement enhanced security measures to help prevent something like this from reoccurring through its systems. Pinnacle is also working closely with the payment card networks to make card issuers aware of potentially affected cards so that they can initiate heightened monitoring of those accounts.
It is always advisable to remain vigilant to the possibility of fraud by reviewing your payment card statements for any unauthorized activity. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card. Please see the section that follows this notice for additional steps you may take.
We regret that this incident occurred and apologize for any inconvenience. If you have questions, you can call 954-556-4499 Monday through Friday between the hours of 9 a.m. and 5 p.m. EST.
Additional Steps You Can Take
We remind you it is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity. If you detect any unauthorized activity on financial accounts, you should immediately contact your financial institution. We also recommend that you make your financial institution aware of this matter and take their advice on steps to protect your bank account. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting companies is as follows:
Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111
Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742
TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-916-8800
If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your state. You can obtain information from these sources about steps an individual can take to avoid identity theft as well as information about fraud alerts and security freezes. You should also contact your local law enforcement authorities and file a police report. Obtain a copy of the police report in case you are asked to provide copies to creditors to correct your records. Contact information for the Federal Trade Commission is as follows:
Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW Washington, DC 20580, 1-877-IDTHEFT (438-4338), www.ftc.gov/idtheft