Sonic - Revision history

Kikismess: /* Malware attack (2017) */ typos

2026-04-20T05:42:40Z

Malware attack (2017): typos

← Older revision		Revision as of 05:42, 20 April 2026
Line 23:		Line 23:
	On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>		On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>

	The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring ~~sonic~~ pay $3		The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring Sonic pay $3 million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref> [[File:Plaintiff messages in Sonic 2020 lawsuit.png\|thumb\|Plaintiff messages in Sonic 2020 lawsuit.]]

	million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:Plaintiff messages in Sonic 2020 lawsuit.png\|thumb\|Plaintiff messages in Sonic 2020 lawsuit.]]

	===Sonic Spam Messages===		===Sonic Spam Messages===

Sojourna at 03:46, 5 April 2026

2026-04-05T03:46:02Z

← Older revision		Revision as of 03:46, 5 April 2026
Line 1:		Line 1:
	{{Incomplete}}		{{Incomplete}}
	{{CompanyCargo		{{CompanyCargo
	\|Founded=1953~~-06-18~~		\|Founded=18 June 1953
	\|Industry=Food		\|Industry=Food
	\|Logo=Sonic ~~Corporation Logo~~.png		\|Logo=Sonic logo.png
	\|ParentCompany=Inspire Brands		\|ParentCompany=Inspire Brands
	\|Type=Subsidiary		\|Type=Subsidiary
Line 9:		Line 9:
	\|Description=		\|Description=
	}}		}}
	~~'''[[wikipedia:Sonic_Drive-In\|Sonic]]''' is a fast food company founded in 1953.~~

	==Consumer-impact summary==		'''{{Wplink\|Sonic Drive-In\|Sonic}}''' is a fast food company founded in 1953.

			==Consumer impact summary==
	{{Ph-C-CIS}}		{{Ph-C-CIS}}

Mr Pollo at 21:34, 17 March 2026

2026-03-17T21:34:46Z

← Older revision		Revision as of 21:34, 17 March 2026
Line 7:		Line 7:
	\|Type=Subsidiary		\|Type=Subsidiary
	\|Website=http://sonicdrivein.com/		\|Website=http://sonicdrivein.com/
	\|Description=~~SONIC!@~~		\|Description=
	}}[[wikipedia:Sonic_Drive-In\|Sonic ~~Corporation~~]] is ~~(you guessed it) also~~ a company =)		}}
			'''[[wikipedia:Sonic_Drive-In\|Sonic]]''' is a fast food company founded in 1953.

	==Consumer-impact summary==		==Consumer-impact summary==

Mr Pollo at 21:33, 17 March 2026

2026-03-17T21:33:07Z

← Older revision		Revision as of 21:33, 17 March 2026
Line 1:		Line 1:
			{{Incomplete}}
	{{CompanyCargo		{{CompanyCargo
	\|Founded=1953-06-18		\|Founded=1953-06-18

Sojourna: /* Incidents */

2026-03-17T04:17:37Z

Incidents

← Older revision		Revision as of 04:17, 17 March 2026
Line 14:		Line 14:
	==Incidents==		==Incidents==
	This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].

	===Malware attack (2017)===		===Malware attack (2017)===
	{{Main\|link to the main CR Wiki article}}		{{Main\|link to the main CR Wiki article}}

	On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>		On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>

	The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3		The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3

	million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:~~Plantiff Messages~~ in Sonic 2020 ~~Lawsuit~~.png\|thumb\|Plaintiff ~~Messages~~ in Sonic 2020 ~~Lawsuit~~]]		million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:Plaintiff messages in Sonic 2020 lawsuit.png\|thumb\|Plaintiff messages in Sonic 2020 lawsuit.]]

	===Sonic Spam Messages===		===Sonic Spam Messages===

SquidthePlummer: accidentally add 2 images, whoops!

2026-03-16T22:22:08Z

accidentally add 2 images, whoops!

← Older revision		Revision as of 22:22, 16 March 2026
Line 18:		Line 18:
	On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>		On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>

	The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3 ~~[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]~~million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]		The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3

			million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]

	===Sonic Spam Messages===		===Sonic Spam Messages===

SquidthePlummer: /* References */ fixed

2026-03-16T22:21:35Z

References: fixed

← Older revision		Revision as of 22:21, 16 March 2026
Line 18:		Line 18:
	On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>		On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>

	The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3 million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach		The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3 [[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]
	Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>

	===Sonic Spam Messages===		===Sonic Spam Messages===

	==== 2020 Lawsuit ====		====2020 Lawsuit====
	On October 21, Plaintiff Danny Collins filed a class action lawsuit against Sonic, alleging the company repeatedly sent her advertising messages even after opting out by replying "Stop". The Plantiff seeks $500 or $1500 for each unsolicited marketing messages sent to consumers.<ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=22 October 2020 \|title=Sonic Drive-In Hit with Class Action in Oklahoma Over Alleged Spam Texts \|url=https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|date=27 October 2020 \|title=Sonic TCPA Lawsuit & Fast Food Telemarketing Violations \|url=https://thelyonfirm.com/blog/sonic-tcpa-lawsuit/ \|url-status=live \|access-date=16 March 2026 \|website=The Lyon Firm}}</ref> As of March 2026, the case is still in progress.		On October 21, Plaintiff Danny Collins filed a class action lawsuit against Sonic, alleging the company repeatedly sent her advertising messages even after opting out by replying "Stop". The Plantiff seeks $500 or $1500 for each unsolicited marketing messages sent to consumers.<ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=22 October 2020 \|title=Sonic Drive-In Hit with Class Action in Oklahoma Over Alleged Spam Texts \|url=https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|date=27 October 2020 \|title=Sonic TCPA Lawsuit & Fast Food Telemarketing Violations \|url=https://thelyonfirm.com/blog/sonic-tcpa-lawsuit/ \|url-status=live \|access-date=16 March 2026 \|website=The Lyon Firm}}</ref> As of March 2026, the case is still in progress.
	~~[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]~~

	====2023 Lawsuit====		====2023 Lawsuit====
	On January 11, a customer from Florida filed a class action lawsuit over unsolicited marketing text sent by the company. Since July 1, 2021 till December 2022, the plaintiff received marketing messages without prior consent, with one of the messages reading;<ref>{{Cite web \|last=Mehorter \|first=Kelly \|date=13 January 2023 \|title=Class Action Alleges Sonic Drive-In Sent Illegal Spam Texts \|url=https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><blockquote>Today only at SONIC: $0.99 Small Mozzarella Sticks! Deal		On January 11, a customer from Florida filed a class action lawsuit over unsolicited marketing text sent by the company. Since July 1, 2021 till December 2022, the plaintiff received marketing messages without prior consent, with one of the messages reading;<ref>{{Cite web \|last=Mehorter \|first=Kelly \|date=13 January 2023 \|title=Class Action Alleges Sonic Drive-In Sent Illegal Spam Texts \|url=https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><blockquote>Today only at SONIC: $0.99 Small Mozzarella Sticks! Deal
Line 34:		Line 31:
	5. +tax. Txt STOP to end</blockquote>As of May 2026, the case is still in progress.		5. +tax. Txt STOP to end</blockquote>As of May 2026, the case is still in progress.

	==== 2025 Lawsuit ====		====2025 Lawsuit====
	On March 4, a lawsuit was filed against Sonic for sending marketing text to customers without consent. The plaintiff claimed he was on the registry to not receive marketing text, however on March 6, 11, 13, 15, and 20, the company sent him marketing messages. Additionally, the plaintiff claims to have never had any business relationships with them.<ref>{{Cite web \|last=Landis \|first=Blake \|date=6 March 2025 \|title=FROM CORN DOGS TO COURTROOMS: Sonic’s Texts Might Cost More Than a Combo Meal \|url=https://natlawreview.com/article/corn-dogs-courtrooms-sonics-texts-might-cost-more-combo-meal \|url-status=live \|access-date=16 March 2026 \|website=The National Law Review}}</ref> The lawsuit was dismissed on September 29, 2025.		On March 4, a lawsuit was filed against Sonic for sending marketing text to customers without consent. The plaintiff claimed he was on the registry to not receive marketing text, however on March 6, 11, 13, 15, and 20, the company sent him marketing messages. Additionally, the plaintiff claims to have never had any business relationships with them.<ref>{{Cite web \|last=Landis \|first=Blake \|date=6 March 2025 \|title=FROM CORN DOGS TO COURTROOMS: Sonic’s Texts Might Cost More Than a Combo Meal \|url=https://natlawreview.com/article/corn-dogs-courtrooms-sonics-texts-might-cost-more-combo-meal \|url-status=live \|access-date=16 March 2026 \|website=The National Law Review}}</ref> The lawsuit was dismissed on September 29, 2025.

SquidthePlummer: /* Sonic Spam Messages */ Added 1 more incident

2026-03-16T22:20:07Z

Sonic Spam Messages: Added 1 more incident

← Older revision		Revision as of 22:20, 16 March 2026
Line 23:		Line 23:
	===Sonic Spam Messages===		===Sonic Spam Messages===

	====2020 Lawsuit====		==== 2020 Lawsuit ====
	https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts (2020)		On October 21, Plaintiff Danny Collins filed a class action lawsuit against Sonic, alleging the company repeatedly sent her advertising messages even after opting out by replying "Stop". The Plantiff seeks $500 or $1500 for each unsolicited marketing messages sent to consumers.<ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=22 October 2020 \|title=Sonic Drive-In Hit with Class Action in Oklahoma Over Alleged Spam Texts \|url=https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|date=27 October 2020 \|title=Sonic TCPA Lawsuit & Fast Food Telemarketing Violations \|url=https://thelyonfirm.com/blog/sonic-tcpa-lawsuit/ \|url-status=live \|access-date=16 March 2026 \|website=The Lyon Firm}}</ref> As of March 2026, the case is still in progress.
			[[File:Plantiff Messages in Sonic 2020 Lawsuit.png\|thumb\|Plaintiff Messages in Sonic 2020 Lawsuit]]

	====2023 Lawsuit====		====2023 Lawsuit====
	https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts ~~2023~~		On January 11, a customer from Florida filed a class action lawsuit over unsolicited marketing text sent by the company. Since July 1, 2021 till December 2022, the plaintiff received marketing messages without prior consent, with one of the messages reading;<ref>{{Cite web \|last=Mehorter \|first=Kelly \|date=13 January 2023 \|title=Class Action Alleges Sonic Drive-In Sent Illegal Spam Texts \|url=https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><blockquote>Today only at SONIC: $0.99 Small Mozzarella Sticks! Deal

			auto-applies in the app & at participating drive-ins 12/15. Lmt

			5. +tax. Txt STOP to end</blockquote>As of May 2026, the case is still in progress.

			==== 2025 Lawsuit ====
			On March 4, a lawsuit was filed against Sonic for sending marketing text to customers without consent. The plaintiff claimed he was on the registry to not receive marketing text, however on March 6, 11, 13, 15, and 20, the company sent him marketing messages. Additionally, the plaintiff claims to have never had any business relationships with them.<ref>{{Cite web \|last=Landis \|first=Blake \|date=6 March 2025 \|title=FROM CORN DOGS TO COURTROOMS: Sonic’s Texts Might Cost More Than a Combo Meal \|url=https://natlawreview.com/article/corn-dogs-courtrooms-sonics-texts-might-cost-more-combo-meal \|url-status=live \|access-date=16 March 2026 \|website=The National Law Review}}</ref> The lawsuit was dismissed on September 29, 2025.

	==Products==		==Products==

SquidthePlummer: Added 1 more incident, though needs to be cleaned up

2026-03-16T21:33:52Z

Added 1 more incident, though needs to be cleaned up

← Older revision		Revision as of 21:33, 16 March 2026
Line 14:		Line 14:
	==Incidents==		==Incidents==
	This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].

	~~=== Health Violations and Closures ===~~
	~~https://www.youtube.com/watch?v=HgKInUS2gJg~~

	~~https://www.youtube.com/watch?v=Uu7mZYYWM8c~~

	~~https://www.youtube.com/watch?v=FLzdDqmRpQI~~


	~~https://www.youtube.com/watch?v=U4s8z7QzA3Q (6 years ago)~~


	===Malware attack (2017)===		===Malware attack (2017)===
	{{Main\|link to the main CR Wiki article}}		{{Main\|link to the main CR Wiki article}}
	~~https://www~~.~~ibtimes.com/sonic~~-~~hack-restaurant-confirms-malware-stole-customer-credit-cards-2597810~~		On September 16, KrebonSecurity disclosed that Sonic suffered a data breach on its Point of sales systems, exposing an estimate 5 millions of customers financial information are being sold on a website called Joker’s Stash.<ref>{{Cite web \|date=26 September 2017 \|title=Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards \|url=https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|url-status=live \|archive-url=https://web.archive.org/web/20180211195243/https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/ \|archive-date=11 February 2018 \|access-date=16 March 2026 \|website=KrebsOnSecurity}}</ref> A few days later, the blog got traction on social media, with major new outlets covering the leak.<ref>{{Cite web \|date=28 September 2017 \|title=Data breach at Sonic restaurants could affect millions of customers \|url=https://www.youtube.com/watch?v=Uu7mZYYWM8c \|url-status=live \|access-date=16 March 2026 \|website=Youtube}}</ref> The company issued a public response on its website on October 4, acknowledging the breach and offering affected customers 24 months fraud protection until December 24, 2017.<ref>{{Cite web \|date=4 October 2017 \|title=SONIC Drive-In: Notice of Payment Card Breach \|url=https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|url-status=dead \|archive-url=https://web.archive.org/web/20171015010107/https://ir.sonicdrivein.com/releasedetail.cfm?releaseid=1042818 \|archive-date=15 October 2017 \|access-date=16 March 2026 \|website=Sonic Drive In}}</ref>

	https://krebsonsecurity.com/2017/09/breach-at-sonic-drive-in-may-have-impacted-millions-of-credit-debit-cards/

	https://~~www~~.~~ibtimes~~.~~com~~/~~sonic-hack-restaurant-confirms-malware-stole-customer-credit-cards-2597810~~

	https://~~www.reuters~~.com/~~article~~/~~legal~~/sonic-~~stuck~~-~~with~~-~~negligence~~-~~claim~~-~~after~~-~~judge~~-~~refuses~~-to-~~revisit~~-~~data~~-~~breach~~-~~rul-idUSL1N2JU36K~~/ ~~(lawsuit)~~


	https://www.~~classaction~~.~~org/news~~/~~sonic~~-~~data~~-breach-~~sparks-another~~-~~class~~-~~action 1st lawsuit~~

	https://~~www~~.~~classaction~~.org/~~news~~/~~sonic-facing-another-class-action-in-the-wake-of-data-breach 2nd lawsuit~~

	https://~~www~~.~~classaction~~.~~org~~/~~news/sonic~~-~~corp~~-~~facing-third-lawsuit-over-recent-data-breach 3rd lawsuit~~

	https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement<~~nowiki~~/>~~(4th~~ lawsuit)		The company faced 12 lawsuits from customers because of this incident, alleging the company's failure to implement up to date security practices and disclosing the incidents to customers.<ref>{{Cite web \|date=12 February 2018 \|title=IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF OHIO EASTERN DIVISION AT CLEVELAND \|url=https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20201020020507/https://www.ohnd.uscourts.gov/sites/ohnd/files/2807-26.pdf \|archive-date=20 October 2020 \|access-date=16 March 2026 \|website=ohnd.uscourts.gov}}</ref><ref>{{Cite web \|last=Rizzi \|first=Corrado \|date=29 September 2017 \|title=Sonic Hit with Class Action Almost Immediately After Data Breach Announcement \|url=https://www.classaction.org/news/sonic-hit-with-class-action-almost-immediately-after-data-breach-announcement \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=15 November 2017 \|title=Sonic Facing Another Class Action in the Wake of Data Breach \|url=https://www.classaction.org/news/sonic-facing-another-class-action-in-the-wake-of-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=5 October 2017 \|title=Sonic Corp. Facing Third Lawsuit Over Recent Data Breach \|url=https://www.classaction.org/news/sonic-corp-facing-third-lawsuit-over-recent-data-breach \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref><ref>{{Cite web \|last=Shaak \|first=Erin \|date=19 December 2017 \|title=Sonic Data Breach Sparks Another Class Action \|url=https://www.classaction.org/news/sonic-data-breach-sparks-another-class-action \|url-status=live \|access-date=16 March 2026 \|website=ClassAction}}</ref> On October 2018, a $4.3 million settlement was reached.<ref>{{Cite web \|last=Spicer \|first=Christina \|date=15 October 2018 \|title=$4.3M Sonic Data Breach Class Action Settlement Reached \|url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/4-3m-sonic-data-breach-class-action-settlement-reached/ \|url-status=live \|access-date=16 March 2026 \|website=Top Class Action}}</ref> In May 2022, a $5.4 settlement was reached, requiring sonic pay $3 million to reimburse financial institutions, and $1 or $1.50 for each payment card reissued or involved.<ref>{{Cite web \|last=Heisig \|first=Eric \|date=7 October 2022 \|title=Judge Signals Approval For Sonic's Data Breach
			Settlement \|url=https://www.bfvlaw.com/wp-content/uploads/2022/10/Judge-Signals-Approval-For-Sonics-Data-Breach-Settlement-Law360.pdf \|url-status=live \|access-date=16 March 2026 \|website=Law360}}</ref>

	=== Sonic Spam Messages ===		===Sonic Spam Messages===

	==== 2020 Lawsuit ====		====2020 Lawsuit====
	https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts (2020)		https://www.classaction.org/news/sonic-drive-in-hit-with-class-action-in-oklahoma-over-alleged-spam-texts (2020)

	==== 2023 Lawsuit ====		====2023 Lawsuit====
	https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts 2023		https://www.classaction.org/news/class-action-alleges-sonic-drive-in-sent-illegal-spam-texts 2023


	~~===A Restaurant in Las Vegas Closed due to several Health Code Violations (2025)===~~
	~~{{Incomplete section}}~~
	~~...~~

	==Products==		==Products==
Line 63:		Line 34:
	==See also==		==See also==

	* [[Subway]]		*[[Subway]]
	* [[Popeyes]]		*[[Popeyes]]

	==References==		==References==

SquidthePlummer: draft

2026-03-16T20:24:28Z

draft

@@ Line 7: / Line 7: @@
 |Website=http://sonicdrivein.com/
 |Description=SONIC!@
-}}
+}}[[wikipedia:Sonic_Drive-In|Sonic Corporation]] is (you guessed it) also a company =)
 ==Consumer-impact summary==
@@ Line 14: / Line 13: @@
 ==Incidents==
-{{Ph-C-Inc}}
+This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
-This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
-===Example incident one (''date'')===
+https://www.youtube.com/watch?v=U4s8z7QzA3Q (6 years ago)
 {{Main|link to the main CR Wiki article}}
-Short summary of the incident (could be the same as the summary preceding the article).
+https://www.ibtimes.com/sonic-hack-restaurant-confirms-malware-stole-customer-credit-cards-2597810
-===Example incident two (''date'')===
 ...
@@ Line 27: / Line 62: @@
 ==See also==
-{{Ph-C-SA}}
 ==References==