Dairy Queen recently has learned of a possible malware intrusion that may have affected some payment cards at certain locations, including two Lynnwood and one Edmonds location.

An investigation has been launched and the Company has retained external forensic experts to help determine the facts. Because nearly all Dairy Queen locations are independently owned and operated, the Company is working closely with affected franchise owners, as well as law enforcement authorities and the payment card brands, to assess the nature and scope of the issue.

The systems of some Dairy Queen locations were infected with the widely-reported Backoff malware that is targeting retailers across the country. The investigation revealed that a third-party vendor’s compromised account credentials were used to access systems at those locations.

Based on the investigation, the Company has established the following:

• The Backoff malware was present on systems at a small percentage of locations in the U.S.
• The time periods during which the Backoff malware was present on the affected systems vary by location. A list of impacted Dairy Queen locations, as well as the relevant time periods, is available here.
• The affected systems contained customers’ names, payment card numbers and expiration dates. The Company has no evidence that other customer personal information, such as Social Security numbers, PINs or email addresses, were compromised as a result of this malware infection.
• Based on its investigation, the Company is confident that this malware has been contained.

You are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. The Company encourages you to remain vigilant by reviewing your account statements and monitoring your free credit reports. If you believe your payment card may have been affected, contact your bank or payment card issuer immediately.  Additional information and security tips are available here.

The Company is offering free identity repair services for one year to customers in the U.S. who used their payment card at one of the impacted locations during the relevant time period. Information on these services and eligibility can be found here.

If you have any questions about this issue, please call 1-855-865-4456, Monday through Saturday from 8 a.m. CT to 8 p.m. CT.