Reports say stolen Hy-Vee account information being sold

An Iowa-based grocery chain says it's aware of reports that hacked customer account information is being sold online.

Posted: Aug 25, 2019 7:36 AM
Updated: Aug 26, 2019 3:09 PM

DES MOINES, Iowa (AP) — An Iowa-based grocery chain says it's aware of reports that hacked customer account information is being sold online.

The Des Moines Register was the first to report that credit and debit card information of some Hy-Vee customers is being sold on an internet site for $17 to $35 apiece.

Hy-Vee acknowledge earlier this month that it detected unauthorized activity on some of its payment processing systems linked to card payments at Hy-Vee restaurants, fuel pumps and drive-thru coffee shops. The company doesn't believe the breach extended to payments systems used inside its grocery stores, drugstores and convenience stores.

The grocery store chain issued the following statement on this story:

"Our investigation is continuing. We are aware of reports from payment processors and the card networks of payment data being offered for sale and are working with the payment card networks so that they can identify the cards and work with issuing banks to initiate heightened monitoring on accounts."

"We do not have a way to independently determine how many of these card numbers on the “dark web” relate to the incident that we are investigating, and it is possible some cards are from incidents that occurred at other merchants. The “dark web” was advertising data being sold from cards from 35 states and more than 100 countries. Hy-Vee has stores in 8 states in one country."

"As we stated in our initial notice, it is always advisable to closely monitor your payment card statements for any unauthorized activity. If you see an unauthorized charge, immediately notify the financial institution that issued the card because cardholders are not generally responsible for unauthorized charges reported in a timely manner. The phone number to call is typically located on the back of the payment card."

"We will provide notification to our customers as soon we get further clarity about the specific timeframes and locations that may have been involved."

Hy-Vee operates more than 240 retail stores across Illinois, Iowa, Kansas, Minnesota, Missouri, Nebraska, South Dakota and Wisconsin.

Article Comments

Mason City
Few Clouds
58° wxIcon
Hi: 86° Lo: 67°
Feels Like: 58°
Albert Lea
63° wxIcon
Hi: 84° Lo: 68°
Feels Like: 63°
63° wxIcon
Hi: 85° Lo: 69°
Feels Like: 63°
Charles City
64° wxIcon
Hi: 83° Lo: 66°
Feels Like: 64°
60° wxIcon
Hi: 83° Lo: 66°
Feels Like: 60°
A final blast of summer weather before meteorological fall in one week.
KIMT Radar
KIMT Eye in the sky

Latest Video


Weather Forecast 9/15


Learning about water quality


Tracking the Monarch butterfly's flight path


Filling the boot for Easter Seals




'We won't stay silent' walk raises awareness for recovery


Providing smoke alarms to homes in Southeast Minnesota.


Walking to end Alzheimer's


Sports OT: Part 2


Sports Overtime Part 1

Community Events