PHP Vulnerability Responses by Company

Noodles & Company

Companies / web services
Aliases / services
ヌードルズ・アンド・カンパニー / Noodles & Company
Official website
https://www.noodles.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

payment cards at affected restaurants

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

POS malware at selected restaurants could capture card numbers, expiration dates and other card data during January 31–June 2, 2016. Online card payments were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the affected restaurants and dates in the notice, then report suspicious statement entries to your card issuer.

Official service URL

Source URLs

  1. Official operator evidencehttps://investor.noodles.com/news-releases/news-release-details/noodles-company-provides-notice-data-security-incidentService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Noodles & Company and the relevant scope.
  2. 2016-06-28 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments