DES MOINES, Iowa (AP) — An Iowa-based grocery chain says it's aware of reports that hacked customer account information is being sold online.
The Des Moines Register was the first to report that credit and debit card information of some Hy-Vee customers is being sold on an internet site for $17 to $35 apiece.
Hy-Vee acknowledge earlier this month that it detected unauthorized activity on some of its payment processing systems linked to card payments at Hy-Vee restaurants, fuel pumps and drive-thru coffee shops. The company doesn't believe the breach extended to payments systems used inside its grocery stores, drugstores and convenience stores.
The grocery store chain issued the following statement on this story:
"Our investigation is continuing. We are aware of reports from payment processors and the card networks of payment data being offered for sale and are working with the payment card networks so that they can identify the cards and work with issuing banks to initiate heightened monitoring on accounts."
"We do not have a way to independently determine how many of these card numbers on the “dark web” relate to the incident that we are investigating, and it is possible some cards are from incidents that occurred at other merchants. The “dark web” was advertising data being sold from cards from 35 states and more than 100 countries. Hy-Vee has stores in 8 states in one country."
"As we stated in our initial notice, it is always advisable to closely monitor your payment card statements for any unauthorized activity. If you see an unauthorized charge, immediately notify the financial institution that issued the card because cardholders are not generally responsible for unauthorized charges reported in a timely manner. The phone number to call is typically located on the back of the payment card."
"We will provide notification to our customers as soon we get further clarity about the specific timeframes and locations that may have been involved."
Hy-Vee operates more than 240 retail stores across Illinois, Iowa, Kansas, Minnesota, Missouri, Nebraska, South Dakota and Wisconsin.
- Reports say stolen Hy-Vee account information being sold
- Hy-Vee teaming up with Minnesota Timberwolves
- Hy-Vee helping to decrease opioid abuse
- Recall issued for Hy-Vee Pasta Salad
- Hy-Vee partners with Rochester Public Schools
- More discount medications available at Hy-Vee
- Hy-Vee still considering major new development in Austin
- Hy-Vee passes out balloons at Mayo Clinic
- Local Hy-Vee evacuated after refrigerant line break
- Hy-Vee to help fight drug abuse in Iowa