Duffy’s Sports Grill Payment and Rewards Disrupted Amid Unconfirmed Qilin Claim

Summary
Local reporting says some Duffy’s locations could not process card payments for days and its rewards program was disrupted. A Qilin listing has not been confirmed by the company and does not establish what happened on its network.
Key points
- The Boca Raton Tribune reported that some Duffy’s locations could not process credit cards for several days and that the MVP rewards program was disrupted.
- The Tribune said at least one location manually recorded customer card details for later processing; no public filing reviewed by the article confirmed card misuse.
- Social media posts reviewed by DysruptionHub described cash-only service, loyalty issues, canceled events, and a temporary closure, but the scale was not confirmed by Duffy’s.
- A Qilin extortion-site listing for Duffy’s was reportedly spotted on March 14 by ransomware[.]live; the listing alone does not prove a network compromise or explain the outage.
- Duffy’s had not publicly confirmed ransomware or the cause of the disruptions, and the article found no confirmation that customer or employee data was taken.
- The article advises customers whose card details were written down to monitor their statements pending a fuller account.
Article Details
- Victim Organization
- Duffy’s Sports Grill
- Incident Type
- Cyber incident causing payment-processing and loyalty-program disruptions; ransomware involvement was not confirmed.
- Disclosure Date
- 2026-03-24
- Data Types Exposed
- Customer card information was reportedly written down manually at at least one location for later processing; no theft or misuse was confirmed.
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- A local report said some locations could not process credit card payments for several days. The MVP rewards program was disrupted, and social media posts described cash-only service, loyalty-point issues, canceled events, and at least one temporary closure. The scope was not publicly confirmed.
- Ransom Or Extortion
- A Qilin extortion-site listing for Duffy’s was first spotted on 2026-03-14. The listing does not establish that the victim’s network was compromised, and Duffy’s had not publicly confirmed ransomware.
- Claim Status
- claimed
