Pub chain JD Wetherspoons has revealed that it has been the victim of a data hack and that card information from around 100 customers has been stolen. The company has described the breach as small-scale and stated that the data taken is not comprehensive enough to allow customer bank accounts to be compromised as it only consisted of the last four digits of the users’ card numbers.
The breach actually dates back to June 2015, but Wetherspoons has maintained that they were not aware of the loss of data until December 1st. It is also possible that other personal data such as names, addresses and email details has also been taken across a broader offering of customers.
The breach affected Wetherspoons’ old website which has since been replaced. The Information Commissioner’s Office will be launching an investigation.