XML 34 R23.htm IDEA: XBRL DOCUMENT v3.19.1
Commitments and Contingencies
6 Months Ended
Mar. 31, 2019
Commitments And Contingencies Disclosure [Abstract]  
Commitments and Contingencies

16.   Commitments and Contingencies

We are involved, from time to time, in various claims and lawsuits incidental to the conduct of our business in the ordinary course. We carry insurance coverage in such amounts in excess of our self-insured retention as we believe to be reasonable under the circumstances and that may or may not cover any or all of our liabilities in respect of these matters. We do not believe that the ultimate resolution of these matters will have a material adverse impact on our consolidated financial position, cash flows or results of operations.

Data Security Incidents

As previously disclosed, we experienced data security incidents during the fiscal years 2014 and 2015 (together, the “data security incidents”). The data security incidents involved the unauthorized installation of malicious software (“malware”) on our information technology systems, including our point-of-sale systems that may have placed at risk certain payment card data for some transactions. The costs that we have incurred to date in connection with the data security incidents include assessments by payment card networks, professional advisory fees and legal fees relating to investigating and remediating the data security incidents.

During the fiscal year ended September 30, 2018, we received an assessment from a payment card network in connection with the data security incidents. The assessment is based on the network’s claims against the Company’s acquiring banks for costs that it asserts its issuing banks incurred in connection with the data security incidents, including incremental counterfeit fraud losses and non-ordinary course operating expenses, such as card reissuance costs. As of March 31, 2019, we have paid the assessment from the payment card network.