Plaintiffs who sued Arby’s over a data breach more than two years ago have asked a federal court to end the matter by giving final approval to a $2 million settlement.
Accommodation of the request would resolve a class action lawsuit that was filed July 21, 2017, over the alleged theft of consumers’ credit card information from a group of corporate-operated Arby’s restaurants between Oct. 8, 2016, and Jan. 12, 2017. The suit alleges that the franchisor was negligent in the way it protected the data. Arby’s has maintained that it did nothing wrong.
“We can confirm that we’ve reached a settlement in this incident. More information can be found at http://arbys.com/security/,” an Arby’s spokesperson said.
The settlement was initially hammered out in July 2018. In addition to paying plaintiffs up to $2 million, Arby’s agreed to certain operational changes, including the appointment of an individual to monitor data security processes.
The agreement was preliminarily approved by Judge William Ray of the U.S. District Court for the Northern District of Georgia earlier this year. The plaintiffs asked the court on Tuesday for a final ratification.
Arby's is a brand in the portfolio of Inspire Brands, which in turn is majority owned by affiliates of Roark Capital.