Dickey’s Barbecue Pit Data Breach – Class Action Investigation

Chimicles Schwartz Kriner & Donaldson-Smith LLP is investigating a potential data breach class action lawsuit against barbecue restaurant chain Dickey’s Barbecue Restaurants following recent news that it detected a massive security breach in its database and servers.

Dickey’s is an Dallas-based franchise and subsidiary of Dickey’s Capital Group. The company has 469 locations across 42 states. Initial reports from Q6 Cyber and Gemini Advisory indicate that the compromised data came from 156 of the locations in 30 states, and that the window of exposure is between July 2019 and August 2020.

In a statement concerning the breach, Dickey’s confirmed that it is working with the FBI and payment card networks in the fallout of the breach. KrebsOnSecurity has reported that one of the dark web’s most popular stores for selling stolen credit card information, Joker’s Stash, is offering card numbers belonging to customers of Dickey’s Barbeque Restaurants for more than 3 million cards. Joker’s Stash is a popular underground destination that specializes in trading in payment-card data. This marketplace is known for advertising and uploading major breaches containing millions of compromised cards, including the recent Wawa breach.

Data security researchers say they observed the marketplace administrator setting the compromised data live on October 12, 2020. The administrators claimed the breached Dickey’s data, which is called BLAZINGSUN breach, is comprised of 3 million cards with a median price of $17 per card.

The information exposed in this data breach may include a variety of sensitive card data points, such as cardholder names, card numbers, addresses, and security codes.  To date, Dickey’s has not confirmed what information has been compromised, but because the card data is available on Joker’s Stash, presumably criminals have accessed and obtained this sensitive information.

Stolen payment card data is valuable to criminals who place the data for sale on the dark web (including on Joker’s Stash), which other criminals purchase in order to perpetrate identity theft and other frauds. Criminals can also use this stolen information to create counterfeit cards to purchase high-priced items from other retailers.

If you are a credit union or bank who issued a debit or credit card that was compromised at a Dickey’s Barbecue Restaurant between July 2019 and August 2020, please contact the lawyers listed on this page.


(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.

Attorneys for this case:

Benjamin F. Johns
Alex M. Kashurba
Samantha E. Holbrook