Despite early uncertainty in the investigation that a wave of credit and bank card fraud centered in Capitol Hill was possibly tied to breaches at multiple businesses, investigating agents from the Secret Service’s Electronic Crimes Task Force Seattle office have told KIRO they believe the breach is tied to only one restaurant:

Bob Kierstead with the Secret Service’s Seattle Electronic Crimes Task Force doesn’t want to give away too many specifics for fear of harming the investigation, but says agents have pinpointed the source of the fraud, and believe the cards were all accessed at one Capitol Hill restaurant, which he declined to name.

The Secret Service has so far refused to name any businesses involved in the Capitol Hill investigation but has made it clear that any business targeted in this breach is also a victim. Investigators believe that the Capitol Hill situation stems from a software or network breach, perhaps occurring over several months, that collected card information before that stolen information was passed onto a distribution network putting valid account information into the hands of thieves around the globe. Investigators originally told CHS that there was a single point of interest but later told the Seattle Times that at least two businesses were tied to the breach. Now comes the KIRO report with the updated information that the investigation centers on a breach at a single Capitol Hill restaurant. KIRO also confirms that there have still been no arrests related to this wave.

On November 3rd, as the extent of the wave became apparent with dozens of fraudulent charges reported, CHS reported that personal and business accounts related to Capitol Hill’s Broadway Grill had been compromised along with accounts of a not-yet-known number of customers who ate and drank at the popular restaurant in recent months.

One of the partners behind the Broadway Grill, Matthew Walsh, sent us the following statement via Facebook:

---

We take this issue very seriously and are working with both the Seattle Police Department as well as the Secret Service to find the people who have done this to everyone and have them stopped.

We have gone above and beyond to make sure that our network is completely secure and that this sort of thing can’t happen to any of our customers, there has been no decline in credit/debit card use because of our actions to ensure safety. Not only were our personal accounts compromised but our business savings and operating accounts have also been compromised.

We are a tiny little company trying to manage this huge monster of a restaurant and for someone to swoop in and try to completely wipe our accounts is a really scary thing. I am seriously worried about the future of our business without the support of our community. We have been growing by leaps and bounds since I took over in June, not only in our new menu and food quality but also in our day to day operation. It is my hope that we have touched enough lives over the years to be able to count on our beloved customers for their support and continued patronage in this difficult time.

Before publishing that information, we contacted agent Kierstead to verify that we were not endangering the investigation. We were told we were free to pursue any leads we found including contacting the Broadway Grill’s point of sales software provider.

Silver Spring, Maryland-based Action Systems, Inc., maker of the point of sale POS software used by the restaurant, confirmed Broadway Grill’s involvement in the investigation via phone but their statement sent to us in e-mail did not specify if ASI has been contacted by investigators. ASI told CHS they did have other customers of their Restaurant Manager system in Seattle but would not identify the restaurants. In their statement sent to us via e-mail, ASI said, “Restaurants using Restaurant Manager v15.0 or earlier have been notified repeatedly that they must upgrade to a more current version of the software before they will be able to operate as a PCI Compliant business. It is the restaurant’s responsibility to act on these repeated warnings.”

We have contacted the Broadway Grill several times but they have not responded since the initial statement from Walsh.

Reports of financial fraud continue to be collected by Seattle police. Since October 24, CHS tallies more than 200 reports in the Capitol Hill area, or about 10 a day. We typically average about one report every two days. Meanwhile, the number of fraud reports across the rest of the city have also been higher than normal as the wave appears to finally be petering out. Here is the latest daily total chart sourced from SPD dispatch data — note that the 11/12 totals are only through around 6 PM:If you find fraudulent activity in your account, contact your financial provider then call the police non-emergency number at (206) 625-5011 and press 2, then press 8 to report your case.

While the number of reports made around Capitol Hill seems to be massive in scale, there are examples of a similar sized waves being tied to a single restaurant. In September, investigators determined that hundreds of credit card fraud cases were tied to the computer system at one Roseville, California restaurant:

Hundreds of local cases in which thieves have collected credit-card numbers and used them to fraudulently make purchases have been traced to customers who frequented one Roseville restaurant, police said today.

Roseville police said that hundreds of credit-card numbers were compromised at Paul Martin’s American Bistro.

The California restaurant remains open after bringing in a security consultant to make sure their business was operating safely.