New York AG Files Lawsuit Against Dunkin’ Donuts For Attacks On Customer Accounts
November 28, 2019 via ConvergeBlog
On September 26, 2019, New York Attorney General Letitia James filed a lawsuit against Dunkin’ Brands, Inc., the franchisor of Dunkin’ Donuts (“Dunkin’”).
The lawsuit involves security issues surrounding Dunkin’s stored value cards, which customers can use to purchase Dunkin’ food and merchandise. Customers can create an online account through Dunkin’s website or mobile app, and then manage their card though that account. Customers can store credit card information in their account to “reload” their cards.
The lawsuit alleges that beginning in early 2015, Dunkin’ customer accounts were targets of credential stuffing attacks (i.e., repeated attempts to gain access to an account through the use of username and password combinations that were previously stolen in an unrelated data breach). If successful in logging in to a customer account, the attackers could access to the customer’s name, email address, profile id, and the card
numbers and PINs for all Dunkin’ stored value cards associated with the customer’s account. By August 2015, over 19,000 customer accounts had allegedly been compromised.
Keep up with the latest and dive into all areas of hospitality news through our converge blog with new articles posted each week
Purchase Textbook
Hospitality Law: Managing Legal Issues in the Hospitality Industry is a practical approach to hospitality law
See What's New
How Restaurants Can Take a Proactive Approach to Security
November 2019 via QSR
Magazine
Data breaches are a serious danger for both restaurants and consumers, as they damage brand trust. Law-makers have taken notice, implementing several new laws and regulations...
‘Tidal Wave’ Of Lawsuits Target Restaurant Gift Cards
November 19, 2019 via Restaurant Business
Dozens of restaurant and retail chains have been sued during the past month for allegedly violating the Americans with Disabilities Act (ADA) by failing to offer Braille-imprinted gift cards.
DoorDash and Uber Eats Aren’t Collecting Sales Tax on Delivery Fees in Some States. That Could Be a Problem.
November 20, 2019 via Vox
Several tax experts Recode interviewed said food delivery app companies’ tax practices could raise legal concerns. The sales taxes in question are on fees that can amount to as much as a third of the total price of food orders — or at least $120 million per year of taxable dollars on the sales of major food delivery companies in California and New York alone, based on Recode’s calculations on an estimated market size from research firm Forrester. If you account for all of the US, that could amount to hundreds of millions of
dollars per year.