Four credit unions and the Michigan Credit Union League have filed class-action suits against fast food giant Arby's Restaurant Group, which recently acknowledged a potential data security incident.

The complaints allege that malware on the Arby's point-of-sale system network allowed hackers to steal data on customer payment cards between Oct. 25, 2016, and Jan. 19, 2017. Track 1 and Track 2 data, which normally includes cardholder names, primary account numbers, expiration dates and sometimes PIN numbers, were compromised, they allege.

The Fort Wayne, Ind.-based Midwest America Federal Credit Union, which has $549 million in assets and about 56,000 members, filed its complaint on Feb. 10, followed by the Huntsville, Ala.-based North Alabama Educators Credit Union; the Saginaw, Mich.-based Wanigas Credit Union and the New Castle, Penn.-based First Choice Federal Credit Union. Gulf Coast Bank & Trust Company, which is headquartered in New Orleans, was also party to the complaints. North Alabama Educators has $89 million in assets and about 10,000 members, Wanigas has $326 million in assets and about 26,000 members, and First Choice has $44 million in assets and about 6,500 members.