In the wake of the Wendy's hack that hit hundreds of franchisees, the company said its own restaurants and new point-of-sale payments system were unaffected.
"The company believes that malware, installed through the use of compromised third-party vendor credentials, affected one particular point of sale system at fewer than 300 of approximately 5,500 franchised North America Wendy's restaurants," the company said in its quarterly filing Wednesday. "The [new] Aloha point of sale system has not been impacted."
Wendy's also reported another 50 franchise restaurants are or have suffered "unrelated cybersecurity issues," without further defining them.
Read MoreRetail businesses face big new hack liability
The burger chain also acknowledged a late-April class action complaint filed against it in Pennsylvania federal court by First Choice Federal Credit Union and others, saying Wendy's "pervasive and inadequate approach to data security" caused unspecified damages. Lawyers representing the bank did not respond to requests for comment.
"Taking advantage of Wendy's lax data security and delayed notification to financial institutions and the public, hackers were able to gather large amounts of consumer data," the lawsuit stated. "Unknown perpetrators also specifically targeted and drained debit accounts with large amounts of money in them, concentrating the damages and causing individual financial institutions… to suffer losses much greater than what was experienced after the Home Depot or Target data breaches."
Target previously said its data breach, in 2014, cost it more than $140 million.