PORTLAND, Maine (NEWS CENTER) -- OTTO pizza said Friday that a recently discovered data breach at its Portland locations may have exposed the credit card numbers of about 900 customers, and it has taken immediate steps to tighten computer security at all of its restaurants.
Company officials said authorities recently notified OTTO that it suffered a "point-of-sale" attack that allowed computer hackers access to some customers' credit card numbers. The attack began in early May and affected credit card terminals at its 576 Congress Street location, and at its 225 Congress Street restaurant. OTTO's six other restaurants in Maine and Massachusetts and customers of its home delivery service are unaffected.
No fraud or misuse of customers' credit card numbers have yet been reported. OTTO has informed all of its employees, and placed a statement on its website informing customers of the situation. A special telephone line has been established to assist customers who have questions or concerns.
The company is advising customers who discover any suspicious transactions on their credit or debit card statements to contact their credit card company or bank immediately. Customers may want to proactively replace their credit cards with a new one, or change their password or pin numbers.
The terminals in question served customers who used their credit or debit cards to purchase meals at the two Portland locations. OTTO believes that less than 3% of the total number of transactions at either location between May 1 and Aug. 13 were potentially compromised.
After discovering the data breach, the hard drives of the affected terminals were replaced and additional firewall and monitoring software was installed. The company feels strongly that customers can now feel secure using their credit and debit cards at all OTTO establishments.
A company spokesman said that while OTTO is fully compliant with payment card industry security requirements, POS attacks are becoming all too common as hackers continue to bypass even the most sophisticated systems.
"This data breach is obviously not as large as some of the similar incidents that have affected big retailers and restaurant chains throughout the country," said Eric Shepherd, director of marketing and communications for OTTO. "And it's fortunate that we caught it before it spread throughout our stores. Nevertheless, it's a serious situation, and we want to make sure that our customers understand what happened and what they can do to protect their personal accounts."
More information for customers can be found at www.ottoportland.com, or by calling 888-453-4022.