Arby’s has more than 1,000 corporate locations, where the hacks were reportedly isolated, thus not reaching its franchise locations. In total, the chain has more than 3,300 restaurants, according to the suit.
Arby’s online database of locations doesn’t indicate which are corporate and which are franchises.
In a statement to The Atlanta Journal-Constitution, the company said it isn’t commenting on the litigation, “except to say that we believe the claims are without merit and intend to vigorously defend against them.”
The chain has said it immediately notified law enforcement and “enlisted the expertise of leading security experts,” when it learned there could’ve been a breach.
The plaintiffs allege Arby’s owes them for all the work it took putting out the fire for customers who feared their cards had been compromised.
The suits are filed in federal court in Atlanta because Arby’s has corporate headquarters in Sandy Springs, near the Fulton-DeKalb County line.