The stolen information includes card numbers, as well as some cardholders' names and card expiration dates, according to the statement. The restaurant chain has been processing card data safely since June 11, 2014. The affected locations span the country with some transactions being processed insecurely for up to eight months.
The restaurant chain is operating an open hotline for questions and is offering customers free fraud alerts.
A proposed class-action lawsuit was filed earlier this month against the company that alleges that the breach might have impacted up to seven million cards.