Updated May 18, 2018
Dear Valued Guests,
This notice is to make you aware that some Chili’s restaurants have been impacted by a data incident, which may have resulted in unauthorized access or acquisition of your payment card data, and to provide you information on steps you can take to protect yourself and minimize the possibility of misuse of your information.
We sincerely apologize to those who may have been affected and assure you we are working diligently to resolve this incident. We are offering free credit monitoring and fraud resolution services for those who may have been affected by this incident.
What Happened? On May 11, 2018, we learned that some of our Guests’ payment card information was compromised at certain Chili’s restaurants as the result of a data incident. Currently, we believe the data incident was limited to between March – April 2018; however, we continue to assess the scope of the incident. We deeply value our relationships with our Guests and sincerely apologize to those who may have been affected.
We immediately activated our response plan upon learning of this incident. We are working with third-party forensic experts to conduct an investigation to determine the details of what happened. Below is information on how you can protect yourself and your information.
We are working diligently to address this issue and our priority will continue to be doing what is right for our Guests. We are committed to sharing additional information on this ongoing investigation with our Guests as we learn more.
What Information Was Involved? The investigation into this incident is ongoing; however, based on the details currently uncovered, we believe that malware was used to gather payment card information including credit or debit card numbers and cardholder names, and potentially expiration dates and CVV codes from our payment-related systems for in-restaurant purchases at certain Chili’s restaurants. Currently, we believe the data incident was limited to between March – April 2018; however, we continue to assess the scope of the incident.
Chili’s does not collect social security numbers, full date of birth, or federal or state identification numbers from Guests. Therefore, this personal information was not compromised.
What Are We Doing? We are working with third-party forensic experts to conduct an extensive investigation to confirm the nature and scope of this incident. Law enforcement has been notified of this incident and we will continue to fully cooperate. We are working with ID Experts® to provide Guests who may have been impacted with free fraud resolution and credit monitoring services.
ID Experts – Enrollment
For those who may have been impacted by the incident, we are offering free identity theft protection services through ID Experts to provide you with MyIDCare™, which will help you resolve issues if your information is compromised. MyIDCare services include:
We encourage you to contact ID Experts with any questions and to enroll in free MyIDCare services by calling (888)710-8606 or going to https://ide.myidcare.com/ChilisDataIncident. MyIDCare experts are available Monday through Friday from 8 a.m. - 8 p.m. Eastern Time. Please note the deadline to enroll is August 15, 2018.
We encourage you to take full advantage of this service offering. MyIDCare representatives have been fully versed on the incident and can answer questions or concerns you may have regarding protection of your personal information.
For More Information. We are committed to sharing additional information on this ongoing investigation with our Guests as we learn more and will continue to update this website.
FREQUENTLY ASKED QUESTIONS:
Updated May 18, 2018
Who is responsible for this attack?
We are working with third-party forensic experts and law enforcement in an effort to determine those responsible. At this time, the responsible party or parties have not been identified.
Who should I contact if I have questions?
If you have any further questions, or for information on the services that are being provided please feel free to contact our dedicated call center at (888)710-8606 or go to https://ide.myidcare.com/ChilisDataIncident. We will also be updating this website.
What are the risks of identity theft with the information that was compromised?
Being notified of this incident or having visited a Chili’s between March – April 2018 does not mean that you are a victim of identity theft. However, we recommend that people enroll in the ID Experts membership and review the recommendations provided online at brinker.mediaroom.com/ChilisDataIncident and by ID Experts.
Is there anything I need to do to in response to the exposure of my personal information?
Once you are enrolled in the ID Experts membership, you may also take advantage of your rights to the free fraud alert services offered by the three major credit bureaus. Placing fraud alerts will provide your credit with additional protection. In addition, doing so will give you access to copies of each of your credit reports at no cost to you. Additionally, there are a number of steps you can take, many of which were detailed in the notification below and by ID Experts.
I received a call from Chili’s regarding this incident and the caller was asking for my information. Is this legitimate?
No. We are NOT initiating any calls to individuals regarding this incident and are not asking for any of your personal information over the phone.
How can I be sure that my personal data won’t be subject to attack again in the future?
We take data privacy and security very seriously. We are working hard to ensure there is no further vulnerability to Chili’s Guests. We are working with third-party forensic experts to conduct an extensive investigation and identify additional safeguards which may be utilized to secure data. As mentioned below, law enforcement has been notified of this incident and we will continue to fully cooperate.
Why does Chili’s have my information?
It is necessary for us to have certain data from customers paying with a credit or debit card as part of the in-restaurant point of sale process.
Was my home address included with the information and am I in any danger of being robbed?
Your home address information was not included as a result of this incident.
What restaurants were affected?
We are working diligently with third-party forensic experts to conduct an extensive investigation to confirm the nature and scope of this incident. We are committed to sharing more information regarding this ongoing investigation with our Guests as we learn more.
How many individuals were affected by the data incident?
The investigation into this incident is ongoing and Chili’s is working with third-party forensic experts to determine those who have been affected. We believe the data incident was limited to between March – April 2018; however, we continue to assess the scope of the incident.
Should I call my bank and close my account? Should I cancel my credit cards?
You do not have to close your bank and credit card accounts. Be sure to monitor your bank and credit card statements for accuracy. If you notice any suspicious activity or you believe your information is being misused, please contact your bank.
Am I safe to use my credit or debit card at Chili’s today?
We have no reason to believe you’re putting yourself at risk by using your payment card today.
How can I stay up-to-date on this incident?
The most up-to-date information can be found on this website. We are committed to sharing additional information with our Guests as we learn more. We also have set up a dedicated call center and website for Guests to obtain information about the incident and to enroll in credit monitoring services. The number for the call center, again, is (888)710-8606, and the address for the website is https://ide.myidcare.com/ChilisDataIncident. We are working hard to make sure these resources have the most up-to-date information. You may also find contact information here.
What Can You Do?
If you used your payment card at a Chili’s restaurant between March – April, 2018, it does not mean you were affected by this incident. However, out of an abundance of caution, in addition to taking advantage of the fraud resolution and credit monitoring services described above, we recommend that you remain vigilant and consider taking one or more of the following steps to avoid identity theft, obtain additional information, and protect your personal information.
Equifax Experian TransUnion
P.O. Box 740256 P.O. Box 9554 P.O. Box 2000
Atlanta, GA 30374 Allen, TX 75013 Chester, PA 19022
(800) 525-6285 (888) 397-3742 (800) 888-4213
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue
NW Washington, DC 20580