You're Dining

Notice of Potential
Payment Card Incident

The Krystal Company would like to advise guests that our company is actively investigating a security incident that involves one of the payment processing systems that services some of our restaurants. 

Our company has retained a leading forensics firm and is conducting an investigation to determine the extent to which information in Krystal’s systems may have been impacted.  We are cooperating with law enforcement and have also notified the payment card networks of the investigation.

Although our investigation is in its early stages, we have learned that the security incident may have involved payment cards processed by a payment processing system used at certain restaurants between July through September 2019.  Krystal uses multiple payment processing systems and, as a result, not all Krystal restaurants have been impacted by this incident.  We have already taken steps to contain and remediate the incident.  We are working hard to determine the specific locations and dates for each restaurant involved in the attack. To date, our investigation has determined that about a third of our restaurants that are not impacted. 

To ensure guests have the latest information, we have set up a dedicated page on our website – www.krystal.com/security – where we will post information and updates about this incident.  Currently, we have posted on our website a list of restaurant locations that may be impacted. Guests may also call our call center at 1-800-457-9782, which is open 24 hours, 7 days-a-week. Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted.

Krystal is committed to protecting the privacy and security of our customers and will continue to take quick action.  While our investigation continues, we would like to remind all of our guests to be vigilant and that it is always good practice to review your payment card statements regularly and report any unusual or unauthorized purchases to your financial institution.

Although our investigation is in its early stages, we have learned that the security incident may have involved payment cards processed by a payment processing system used at certain restaurants between July through September 2019. Krystal is working hard to determine the specific locations and dates for each restaurant involved in the attack. Below is a list of restaurant locations that may be impacted and can be searched using the look-up tool below. If you do not see a specific restaurant location when searching this tool, that restaurant has not been identified as potentially impacted.

Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted.

Frequently Asked Questions

Q: What happened?

A: The Krystal Company is actively investigating a security incident that involves one of the payment processing systems that services some of our restaurants. We are cooperating with law enforcement and have also notified the payment cards networks about the investigation.

Although our investigation is in its early stages, we have learned that the security incident may have involved payment cards processed by a payment processing system used at certain restaurants between July through September 2019. Krystal uses multiple payment processing systems, and as a result, not all Krystal restaurants have been impacted by this incident. We have already taken steps to contain and remediate the incident. We are working hard to determine the specific locations and dates for each restaurant involved in the attack. To date, our investigation has determined that about a third of our restaurants are not impacted. To ensure guests have the latest information, we have set up a dedicated page on our website – www.krystal.com/security – where we will post information and updates about this incident.

Currently, we have posted on our website a list of restaurant locations that may be impacted. Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted. Krystal is committed to protecting the privacy and security of our customers and will continue to take quick action.

Q: When did the incident occur?

A: Although our investigation is in its early stages, we believe that payment cards used at certain restaurants between July through September 2019 may have been impacted. We are working hard to determine specific locations and dates for each restaurant involved in the attack. Currently, we have posted on our website a list of restaurant locations that may be impacted. Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted.

Q: What locations may have been involved/affected?

A: Our investigation is ongoing. We are still determining specific locations and dates for each restaurant involved in the attack.

Currently, we have posted on our website a list of restaurant locations that may be impacted. Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted.

Q: Has this attack been contained?

A: Yes. We have already taken steps to contain and remediate the incident. As part of our ongoing commitment to protecting guest information and privacy, we will work with leading partners in cybersecurity to take steps to strengthen and enhance the security of our systems as we go forward.

Q: What kind of information or data may have been affected?

A: We believe the security incident may have impacted payment cards, including debit and credit card numbers, used at certain restaurants between July through September 2019.

Q: How can I tell if my payment card/credit card may have been affected?

A: We believe the security incident involves one of the payment processing systems that services some of our restaurants. The incident may have impacted payment cards, including debit and credit cards, used at certain restaurants between July through September 2019. We are working hard to determine specific locations and dates for each restaurant involved in the attack. Currently, we have posted on our website a list of restaurant locations that may be impacted. Krystal will provide updates to guests once we have completed our investigation and know more about payment cards that may have been impacted. While our investigation continues, Krystal would like to remind guests that it is always good practice to review their payment card statements regularly and report any unusual or unauthorized purchases to their financial institution.

Q: Are you working with law enforcement?

A: Yes. We are cooperating with law enforcement.

Q: Do I need to cancel or replace my debit/credit card? Do I need to notify my bank or card company?

A: It is always good practice to review your payment card statements regularly and report any unusual or unauthorized purchases to your financial institution.

Q: Is it safe for guests to shop/use credit or debit cards at Krystal restaurants?

A: Yes. We have already taken steps to contain and remediate the incident.

Q: How can I get more information?

A: We have set up a dedicated page on our website – www.krystal.com/security – where we will post information and updates for guests about this incident. Please direct any guests to our website or call center if they have questions.

1455 Lincoln Pkwy, Ste 600 Dunwoody, GA 30346 770-351-4500