Landry’s issues list of restaurants, venues affected by data breach

Landry's Inc. said it is notifying payment card holders affected by a point-of-sale data breach during three periods from May 2014 through December. The breach affected 40 locations; brands affected included include Landry's Seafood, Chart House, Saltgrass Steak House, Bubba Gump Shrimp Co., Claim Jumper, Morton's The Steakhouse, McCormick & Schmick's, Mastro's Restaurants and Rainforest Cafe.

In a statement issued Friday, the Houston-based hospitality company said the at-risk periods were May 4, 2014-March 15, 2015; May 5-Dec. 3, 2015; and March 16-May 4, 2015.

In a statement, Landry's said its investigation found that hackers installed a program on payment processing devices company restaurants, food and beverage outlets, spas, entertainment venues and properties. The program searched for cardholder names, card numbers, expiration dates and internal verification codes collected from payment cards' magnetic stripes.

Landry's didn't say how many customers the breach affected.

Nevada locations affected by the breach included:

-- Bubba Gump shrimp in Laughlin, May 8, 2014-Dec. 3, 2015.

-- The Chart House at the Golden Nugget Las Vegas, May, 8, 2014-March 14, 2015; and Nov. 19, 2015.

-- Claim Jumpers at the Golden Nugget in Las Vegas, June 18, 2014, and Summerlin, May 9, 2014-March 14, 2015, and May 8-Dec. 3, 2015.

-- Four Golden Nugget Laughlin locations: Gold Diggers. May, 5, 2014-March 14, 2015 and Dec. 3, 2015; the deli, May 5-June 4, 2014; Starbucks, May 5-May 20, 2014; Banquet service, May 5-June 4, 2014.

-- Thirteen locations at the Golden Nugget Las Vegas: the Stage Bar, Showroom Bar and H2O pool bar, Rush Lounge, room service, banquets and sports bar, Hideout bar, Gold Diggers and Claude's Bar, May 5, 2014-March 15, 2015; May 8-Dec. 3, 2015; Lillie's, May 9, 2014-March 14, 2015; Ice Bar, May 10, 2014-March 14, 2015.

-- Landry's Seafood in Las Vegas, May 10, 2014-March 14, 2015; May 6-Nov. 19, 2015.

-- McCormick & Schmick's Las Vegas, May 9, 2014-March 14, 2015; May 8-Dec. 3, 2015.

-- Rainforest Cafe in Las Vegas, May 5-Dec. 3, 2015.

-- She Restaurant in Las Vegas, May 24, 2014. (The restaurant closed May 25, 2014).

-- Trevi's Las Vegas, May 9, 2014-March 14, 2015; May 8-Dec. 3, 2015.

-- Vic & Anthony's at the Golden Nugget Las Vegas, May 10, 2014-Dec. 3, 2015.

Landry's said it has adopted security measures including end-to-end encryption to prevent a similar breach. The company added that it continues to support law enforcement's investigation and is working with payment card networks to identify affected cards.

Landry's said it will send letters or emails to customers it can identify as having used cards at affected location during at-risk timeframes.

Find Matthew Crowley on Twitter @copyjockey