Rusty Scupper Included In National Credit Card Breach

BALTIMORE, MD — The credit card information of customers at the Rusty Scupper may have been compromised over a 10-week period between the end of last year and early this year, officials say.

Customers may have had their card numbers, card expiration dates, card verification values and cardholder names stolen from the Rusty Scupper at 402 Key Highway between Oct. 27, 2016, and Jan. 9, 2017.

The Secret Service is helping investigate the incident, which impacted 12 restaurants nationwide that are managed by Select Restaurants.

The company says it began investigating unusual activity related to its third-party vendor and data systems on March 30. After contracting an independent forensic expert to look into its systems, Select Restaurants had its suspicions confirmed in late April: There had been a possible compromise of guests' debit and credit cards over a roughly three-month span.

After discovering the breach, Select Restaurants employed forensic investigators to remove any malware and implement new procedures to prevent further breaches.

“Select Restaurants takes the security of our guests’ information seriously, and we apologize for the inconvenience this incident has caused our guests,” Alan Donatelli, president and COO of Select Restaurants, said in a statement. “We continue to work with third-party forensic investigators and law enforcement officials to ensure the security of our systems, and do all we can on behalf of our guests.”

A spokesperson for Select Restaurants did not immediately return Patch's request for comment.

Impacted restaurants and their dates of compromise are below.

• Rusty Scupper, 402 Key Highway, Inner Harbor Marina, Baltimore, Md. — Oct. 27, 2016 - Jan. 9, 2017
• Parkers' Lighthouse/Queensview Steakhouse, 435 Shoreline Village Dr., Long Beach, Calif. - Oct. 27, 2016 - Jan. 5, 2017
• Countyline Tavern, 800 W Lake Cook Rd., Buffalo Grove, Ill. - Oct. 27, 2016 - Jan. 8, 2017
• Parkers’ Restaurant & Bar, 1000 31st St., Downers Grove, Ill. — Oct. 27, 2016 - Jan. 9, 2017
• Winberie's Oak Park, 151 North Oak Park Ave., Oak Park, Ill. - Oct. 26 - Jan. 7, 2017
• Skywalk Observatory, 800 Boylston St., Prudential Tower Floor 52, Boston, Mass. - Oct. 26, 2016 - Jan. 10, 2017
• Top of the Hub, 800 Boylston St., Prudential Tower Floor 52, Boston, Mass. - Oct. 26, 2016 - Jan. 10, 2017

• Winberie's Princeton, One Palmer Square, Princeton, N.J. - Oct. 26, 2016 - Jan. 10, 2017
• Winberie’s Summit, 2 Kent Place Boulevard, Summit, N.J. - Oct. 26, 2016 - Jan. 7, 2017
• Black Powder Tavern, 1164 Valley Forge Road, Wayne, Penn. — Oct. 27, 2016 - Jan. 8, 2017
• Parkers' Blue Ash, 4200 Cooper Road, Cincinnati, OH - Oct. 27, 2016 - Feb. 3, 2017
• Pier W, 12700 Lake Avenue, Winton Place, Lakewood, OH - Oct. 27, 2016 - Jan. 7, 2017

—By Patch editor Chris Mosby

Image of the Rusty Scupper by m01229/Flickr, licensed under CC BY 4.0.