November 30, 2018

Taco Bueno is notifying our customers that we recently received a report from a third party that suggested there may have been unauthorized access to data from payment cards that were used at certain Taco Bueno restaurants.  We immediately launched an investigation and engaged leading cybersecurity experts to assist us in looking for signs of an issue. 

Our investigation has identified unauthorized activity on the network that supports payment processing for purchases made in our restaurants.  Because Taco Bueno started deploying payment processing encryption technology on POS devices across its restaurants in May 2017, it appears that only certain Taco Bueno restaurants may have been involved. Our investigation is focused on card transactions in Taco Bueno restaurants from March 2018 through November 2018.  Because our investigation is continuing, complete findings are not available, and it is too early to provide further details.  We expect to provide an additional notice as we get further clarity on the specific restaurants and timeframes that may have been involved. We have also notified law enforcement and continue to support their investigation.

It is always advisable for customers to closely monitor their payment card statements for any unauthorized activity. Customers should immediately report any unauthorized charges to the card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of the payment card.

We regret that this incident occurred and apologize for any inconvenience. We will continue to work to address this matter.