Dairy Queen announced a data breach that affects some of its customers’ sensitive credit card information. The breach happened at certain Dairy Queen/Orange Julius locations across the country, including a dozen stores in Colorado.

“Because nearly all DQ and Orange Julius locations are independently owned and operated, we worked closely with affected franchise owners, as well as law enforcement authorities and the payment card brands, to assess the nature and scope of the issue,” a statement says.

“As a result of our investigation, we discovered evidence that the systems of some DQ locations and one Orange Julius location were infected with the widely-reported Backoff malware that is targeting retailers across the country.”

Customers’ names, payment card numbers and expiration dates were compromised.  “We have no evidence that other customer personal information, such as Social Security numbers, PINs or email addresses, were compromised as a result of this malware infection,” the statement says. The company also says the problem has been contained.

The table below from the company shows the locations and time frames of Colorado stores that are involved. Many are in metro Denver but there are locations involved statewide.

Dairy Queen is offering free identity repair services for one year to customers who used a card at one of the impacted locations.

Here is a full list of impacted stores.

Via: kdvr