Iconic fast-food restaurant gets hit by major cyberattack in the United States, South Korea, and Taiwan

Jun 14, 2021 03:45 GMT  ·  By

McDonald's Corp, the iconic fast-food restaurant, has been hit by a data breach leading to stolen in the United States, South Korea, and Taiwan.  

The exact nature of the data breach has not been disclosed. According to Wall Street Journal, the leak includes certain business contact information of U.S. employees along with franchisees and restaurant information such as seating capacity and square footage.

Customer data from the United States was not leaked, but data from South Korea and Taiwan was. In Taiwan, the attack also resulted in the loss of personnel data, such as names and contact information.

McDonald’s said, "While we were able to close off access quickly after identification, our investigation has determined that a small number of files were accessed, some of which contained personal data".

The cyberattack was discovered due to massive investment in the company's cybersecurity procedures

The hack was discovered because of the burger chain's significant investment in cybersecurity procedures, the company said.

A spokesperson told CNN Business that “These tools allowed us to quickly identify and contain recent unauthorized activity on our network".

“A thorough investigation was conducted, and we worked with experienced third parties to support this investigation".

However, if McDonald's cybersecurity measures were indeed significant, the company would not announce a data breach. The claim of a data breach is an indication of effective cybersecurity is a perplexing turn of phrase. There is no evidence that ransomware was used, but data was stolen from three different nations and numerous attacks were carried out.

According to Kate Kuehn, senior vice president of application relationship management company vArmour Networks Inc, the data breach is a clear reminder that all companies must assume they have already been infiltrated and adopt a zero-trust paradigm of defense. Companies must respond to and contain an incident and real-time visibility and application relationship management are critical to the success of the attempt.