On October 9, 2014, the California Office of the Attorney General disclosed a data breach affecting International Dairy Queen, Inc. (IDQ), involving nine Dairy Queen and one Orange Julius location in California. The incident stemmed from the Backoff malware, a point-of-sale (POS) threat that infiltrated payment systems, potentially exposing customers' payment card details, including names, card numbers, and expiration dates. The breach extended beyond California, impacting 395 U.S. locations in total. The compromised data primarily involved financial information tied to payment transactions, though there was no explicit confirmation of large-scale fraud or identity theft stemming directly from the incident. The malware exploited vulnerabilities in the POS systems, allowing unauthorized access to cardholder data during transactions. While the breach did not result in a full-scale operational shutdown or broader systemic damage, it posed significant reputational and financial risks for IDQ, including potential regulatory penalties, customer distrust, and costs associated with remediation, such as card reissuance and fraud monitoring. The incident highlighted vulnerabilities in retail payment infrastructures and underscored the growing threat of POS malware in compromising consumer financial data. IDQ likely faced scrutiny over its cybersecurity measures, particularly in securing third-party vendor systems and detecting intrusions in a timely manner.