About 500 of McDonald's more than 14,000 restaurants have made the changes with Florida, New York and Southern California the first regions to adopt the new format.
Hackers stole "cardholder name, credit or debit card number, expiration date, cardholder verification value, and service code," among other data, the company said earlier on Thursday.