Truluck's Seafood, Steak & Crab House Provides Notice of Data Event

HOUSTON, Feb. 12, 2019 /PRNewswire/ -- Truluck's Seafood, Steak & Crab House which is headquartered in Houston, TX, announced today that it has taken action after becoming aware of an incident that compromised the security of payment card information customers who made purchases at certain Truluck's locations between November 21, 2018 and December 8, 2018.  The impacted locations are:  Houston (Downtown), Houston (The Woodlands), Dallas, Austin (Downtown), Austin (Arboretum), Naples, Southlake, and Chicago.   Truluck's immediately responded and has since secured its systems.  Truluck's is providing notice of this event via this press release and its website, as well as certain state regulators.

What Happened?  Truluck's was contacted by the FBI about potential unauthorized access to one of their servers. Truluck's commenced an investigation, using third-party forensic experts, to determine the nature and scope of the incident. Through this investigation, Truluck's confirmed, on or about December 19, 2018, that an unauthorized actor inserted malware into the point of sale systems at eight restaurants to capture customer payment card information used for purchases.  Cards used at the Austin (Downtown) location could have been captured between November 4, 2018 and December 8, 2018.  At all other impacted locations, the card data may have been collected by the malware between November 21, 2018 and December 8, 2018. 

What Information Was Involved? Through the investigation, Truluck's confirmed that the malicious code had the ability to capture credit or debit card number and expiration date. Customers' names and addresses were not exposed.

What Truluck's Is Doing. As Truluck's does not store customer names and addresses for card transactions, Truluck's is providing notice to potentially impacted individuals by way of a notice on the homepage of the Truluck's website, www.trulucks.com, as well as publishing notice to certain media outlets.

Information privacy and security are among Truluck's highest priorities, and they take this incident seriously. Upon learning of this incident, they quickly took steps to determine how the information may have been accessed and took action to prevent further unauthorized access to card data. As part of their ongoing commitment to the security of personal information in their care, they are also working to review their existing information security procedures and to implement additional safeguards to further secure the information on their systems. Truluck's continues to work with third-party experts to ensure the security of their systems on behalf of their customers.

For More Information. Truluck's has established a dedicated assistance line for individuals seeking additional information regarding this incident. If you believe you were impacted by this incident, you can call 1-877-449-1866 8am to 8pm Central Time, Monday through Friday, excluding major holidays.

What You Can Do. Truluck's encourages you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious activity. Under U.S. law, you are entitled to one free credit report annually from each of the major credit reporting bureaus. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the major credit bureaus listed below to request a free copy of your credit report.

You can further educate yourself regarding identity theft, security freezes, fraud alerts, and the steps you can take to protect yourself against identity theft and fraud by contacting the Federal Trade Commission or your state Attorney General.  The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission encourages those who discover that their information has been misused to file a complaint with them.  Instances of known or suspected identity theft should be reported to law enforcement, the Federal Trade Commission, and your state Attorney General. 

SOURCE Truluck's Seafood, Steak & Crab House