Filed in U.S. District Court in Oklahoma, the lawsuit is a putative class-action on behalf of financial institutions allegedly affected by the breach. American Airlines Federal Credit Union claims in its complaint that Sonic didn’t do enough to safeguard its point of sales systems or keep them up to date.