Security Compromise Update

Updated Statement From Rick Federico
CEO of P.F. Chang's
August 4, 2014

Since being alerted to the security compromise that we believe may have affected certain domestic P.F. Chang's China Bistro restaurants, our team has worked continuously to investigate the security compromise and to ensure the security of our guests' credit and debit card information. The security compromise has been contained and P.F. Chang's has been processing credit and debit card data securely at all locations since June 11, 2014.

We have identified certain P.F. Chang's China Bistro branded restaurants in the continental United States where we believe certain credit and debit cards used during specified time frames may have been compromised, and we have posted a list of those restaurant locations and time frames below. No Pei Wei branded restaurants have been affected by this security compromise. We are committed to providing support and resources, including complimentary identity protection services, for all guests that may potentially be affected by the security compromise. Additional details can be found in the updated information posted on this page.

It is a privilege to serve our guests and we thank you for your patience during this time. We look forward to hosting you in our restaurants soon.

See Locations >

See Frequently Asked Questions >

Press Release Statement from Rick Federico CEO of P.F. Chang's

Scottsdale, Arizona, August 4, 2014 - On Tuesday, June 10, the United States Secret Service alerted P.F. Chang's to a possible security compromise involving credit and debit card data reportedly stolen from certain P.F. Chang's China Bistro branded restaurants located in the continental United States. An investigation into this incident was immediately initiated. Our team, including third-party forensics experts, has been working continuously to understand the nature and scope of the incident. This investigation is ongoing. The security compromise, however, has been contained, and P.F. Chang's has been processing credit and debit card data securely since June 11, 2014.

We have determined that the security of our card processing systems was compromised, and we have reason to believe that the intruder may have stolen some data from certain credit and debit cards that were used during specified time frames at 33 P.F. Chang's China Bistro branded restaurant locations in the continental United States. The potentially stolen credit and debit card data includes the card number and in some cases also the cardholder's name and/or the card's expiration date. However, we have not determined that any specific cardholder's credit or debit card data was stolen by the intruder.

Please visit pfchangs.com/security for a list of the 33 restaurant locations from which we believe credit and debit card data may have been stolen and, for each location, the time frame during which we believe the possibly compromised cards were used by guests at that location. At that site guests can also learn more about the identity protection services being provided for all potentially affected guests. Given the continuing nature of the investigation, other time frames, locations or findings may be identified; therefore, we encourage you to check the site periodically for future updates.

P.F. Chang's encourages its guests to remain vigilant and seek to protect against possible identity theft or other financial loss by reviewing account statements for any unusual activity, notifying their credit card companies, and monitoring their credit reports. Under U.S. law, individuals are entitled to one free credit report annually from each of the three major credit bureaus. To obtain a free credit report, visit www.annualcreditreport.com or call, toll-free, (877) 322-8228.

At no charge, P.F. Chang's guests can also have these credit bureaus place a “fraud alert” on their files that alerts creditors to take additional steps to verify their identity prior to granting credit in their names. Please note, however, that because it tells creditors to follow certain procedures to protect the individual's credit, it may also delay the ability to obtain credit while the agency verifies the individual's identity. As soon as one credit bureau confirms an individual's fraud alert, the others are notified to place fraud alerts on that individual's file. Any individual wishing to place a fraud alert, or who has questions regarding their credit report, can contact any one of the following agencies: Equifax, P.O. Box 105069, Atlanta, GA 30348-5069, 800-525-6285, www.equifax.com; Experian, P.O. Box 2002, Allen, TX 75013, 888-397-3742, www.experian.com; or TransUnion, P.O. Box 2000, Chester, PA 19022-2000, 800-680-7289, www.transunion.com. Information regarding security freezes may also be obtained from these sources.

The Federal Trade Commission (FTC) also encourages those who discover that their information has been misused to file a complaint with them. To file a complaint with the FTC, or to obtain additional information on identity theft and the steps that can be taken to avoid identity theft, the FTC can be reached at: 600 Pennsylvania Avenue NW, Washington, D.C. 20580, or at www.ftc.gov/bcp/edu/microsites/idtheft/ or (877) ID-THEFT (877-438-4338); TTY: (866) 653-4261. State Attorneys General may also have advice on preventing identity theft, and instances of known or suspected identity theft should be reported to law enforcement, the Attorney General in the individual's state of residence, and the FTC. Individuals can also learn more about placing a fraud alert or security freeze on their credit files by contacting the FTC or their state's Attorney General. For North Carolina residents, the Attorney General can be contacted at 9001 Mail Service Center, Raleigh, NC 27699-9001, 919) 716-6400, www.ncdoj.gov. For Maryland residents, the Attorney General can be contacted at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202, (888) 743-0023, www.oag.state.md.us.

We regret any inconvenience this security compromise may have caused our guests. To better assist our guests whose card data may potentially have been affected, P.F. Chang's has established a confidential hotline to answer questions. This hotline is available Monday through Saturday, 8:00 a.m. to 8:00 p.m. C.S.T. and can be reached at 1-877-412-7152. Guests can also visit pfchangs.com/security for additional information.

At this time, we believe that certain credit and debit cards used at the following restaurant locations during the dates listed may have been compromised:

Locations
Address City State Dates
7135 E. Camelback Rd. Scottsdale AZ 10/19/2013 - 6/11/2014
2015 Birch Road Chula Vista CA 10/19/2013 - 6/11/2014
3525 Carson St. Torrance CA 10/19/2013 - 6/11/2014
436 North Orlando Avenue Winter Park FL 10/19/2013 - 6/11/2014
125 Westchester Avenue White Plains NY 10/19/2013 - 6/11/2014
10 Providence Town Center Collegeville PA 10/19/2013 - 6/11/2014
2110 Hamilton Place Blvd. Chattanooga TN 10/19/2013 - 6/11/2014
15151 Potomac Town Place Woodbridge VA 10/19/2013 - 6/11/2014
16170 N. 83rd Ave. Peoria AZ 2/21/2014 - 6/11/2014
5621 Paseo Del Norte Carlsbad CA 2/21/2014 - 6/11/2014
3101 PGA Boulevard Palm Beach Gardens FL 2/21/2014 - 6/11/2014
1295 Chesterfield Parkway East Chesterfield MO 2/21/2014 - 6/11/2014
6801 Fayetteville Rd Durham NC 2/21/2014 - 6/11/2014
3545 US Highway 1 Princeton NJ 2/21/2014 - 6/11/2014
2626 Miamisburg-Centerville Rd. Dayton OH 2/21/2014 - 6/11/2014
1978 E. 21st Street Tulsa OK 2/21/2014 - 6/11/2014
40762 Winchester Road Temecula CA 4/10/2014 - 6/11/2014
900 Stanford Shopping Center Palo Alto CA 4/10/2014 - 6/11/2014
15301 Ventura Boulevard Sherman Oaks CA 4/10/2014 - 6/11/2014
7870 Monticello Ave. Rancho Cucumonga CA 4/10/2014 - 6/11/2014
7210 W. Alameda Ave Lakewood CO 4/10/2014 - 6/11/2014
27001 US Highway 19 N, Ste #1150 Clearwater FL 4/10/2014 - 6/11/2014
5 Woodfield Mall Schaumburg IL 4/10/2014 - 6/11/2014
600 E. Pratt Street Baltimore MD 4/10/2014 - 6/11/2014
25 The Boulevard Saint Louis St. Louis MO 4/10/2014 - 6/11/2014
3667 Las Vegas Boulevard South Las Vegas NV 4/10/2014 - 6/11/2014
1600 Settlers Ridge Center Dr; Bldg. 1300 Pittsburgh PA 4/10/2014 - 6/11/2014
983 Baltimore Pike Glen Mills PA 4/10/2014 - 6/11/2014
10114 Jollyville Road Austin TX 4/10/2014 - 6/11/2014
525 Bellevue Square Bellevue WA 4/10/2014 - 6/11/2014
3000 184th St. Lynnwood WA 4/10/2014 - 6/11/2014
1145 Newport Center Drive Newport Beach CA 10/19/2013 - 4/10/2014
10325 Perimeter Parkway Charlotte NC 10/19/2013 - 10/26/2013

Frequently Asked Questions:

As we have previously reported, on Tuesday, June 10, 2014, the United States Secret Service alerted P.F. Chang's of a possible security compromise involving credit and debit card data reportedly stolen from certain P.F. Chang's China Bistro branded restaurants located in the continental United States. An investigation into this incident was immediately initiated. Our team, including third-party forensic experts, has been working continuously to understand the nature and scope of the incident.

We have determined that the security of our card processing systems was compromised, and we have reason to believe that the intruder may have stolen some data from certain credit and debit cards that were used during specified time frames at 33 P.F. Chang's China Bistro branded restaurant locations in the continental United States. The potentially stolen data includes the card number and in some cases also the cardholder's name and/or the card's expiration date. However, we have not determined that any specific cardholder's credit or debit card data was stolen by the intruder.

While the investigation is ongoing, the security compromise has been contained, and P.F. Chang's has been processing credit and debit card data securely since June 11, 2014.

The United States Secret Service alerted P.F. Chang's to this incident on June 10, 2014.

While P.F. Chang's investigation into this incident is ongoing, we've been able to determine that the security of our card processing systems was compromised, and we have reason to believe the intruder may have stolen some data from certain credit and debit cards that were used during specified time frames at 33 P.F. Chang's China Bistro branded restaurant locations in the continental United States. This information can be found in the chart posted on this page.

P.F. Chang's takes the security of our guests' personal information very seriously and goes to great efforts to protect our guests' credit and debit card data. Despite any company's best efforts, intrusions such as these can occur and can take time to discover. Once we were alerted to a potential security compromise, an investigation into this incident was immediately initiated. P.F. Chang's has been processing credit and debit card data securely since June 11, 2014. Our team, including third-party forensics experts, has been working continuously to understand the nature and scope of the incident. This investigation is ongoing. The security compromise has been contained.

Since first being alerted to the security compromise that affected certain domestic P.F. Chang's China Bistro branded restaurants in the continental United States, our team has worked tirelessly to investigate this matter. To ensure the security of our guests' personal information, we quickly moved to a manual processing system for all credit and debit card transactions to prevent any further potential exposure of our customers' credit and debit card information. The security compromise has been contained and we have replaced the affected hardware and returned to our standard credit and debit card processing system.

P.F. Chang's is also offering complimentary identity protection services to all potentially affected.

The potentially stolen data includes the card number and in some cases also the cardholder's name and/or the card's expiration date. However, we have not determined that any specific cardholder's credit or debit card data was stolen by the intruder.

The restaurant locations and dates can be found in the chart posted on this page. No Pei Wei branded restaurants have been affected by this security compromise.

If you suspect fraudulent activity on your credit card or debit card, we urge you to report this suspected fraudulent activity to your card company or issuing bank.

Yes. It is safe for our guests to use their credit and debit cards in our restaurants. The security compromise has been contained and we have replaced the affected hardware and returned to our standard credit and debit card processing system.

No. P.F. Chang's does not have sufficient contact information to contact potentially affected guests directly. However, we have emailed guests that have provided us with their email address, and have created this website as a resource for potentially affected guests to determine if they dined at one of the identified restaurant locations during specified time frames. The chart posted on this page includes a list of those P.F. Chang's China Bistro locations and time frames. If you dined at any of the P.F. Chang's restaurant locations during the dates outlined in the chart, we believe your card data may have been potentially affected. We encourage you to continue monitoring your accounts and to report any suspected fraudulent activity to your card company or issuing bank.

P.F. Chang's is taking steps to protect your credit card information. You are automatically protected with AllClear Secure for the next 12 months – there is no action required on your part to receive this service. If a problem arises, simply call 1-877-412-7152 and a dedicated investigator will assist you in restoring your identity to its accurate state.

For additional protection, you may also enroll in AllClear PLUS at any time during your coverage period. AllClear PLUS includes identity theft monitoring and a $1 million identity theft insurance policy. To use the PLUS service, you will need to provide your personal information to AllClear ID. You can visit pfchangs.allclearid.com to gain access to your redemption code. Please note that additional steps may be required by you in order to activate your phone alerts.

We encourage you to check this website for updates. If you have additional questions, you may also call 1-877-412-7152.