Investigation findings from Hy-Vee credit card data breach

Investigation findings from Hy-Vee credit card data breach”

An announcement from Hy Vee says unauthorized activity on their payment processing systems was detected July 29th.

As payment card data passed through a restaurant's server, the PoS malware copied from the card's magnetic stripe the card number, expiration date, and internal verification code; the cardholder's name was also available in some cases.

An investigation found that some point-of-sale devices at certain Hy-Vee fuel pumps, Hy-vee owned drive-thru coffee shops and restaurants were infected with malware that could have put customers' card information in danger.

Hy-Vee has announced additional information about the payment card incidents that happened at their gas stations, restaurants, and coffee shops that were first reported back in August.

DES MOINES, Iowa- Hy-vee has conducted an investigation into credit card data breaches that started July 29 of 2019.

Unlike the compromise at Focus Brands subsidiaries where the malware resided for about a month on the systems, the duration of the malicious activity at Hy-Vee was much longer.

Hy-Vee also revealed the periods when data from cards used at the targeted locations may have been accessed: December 14, 2018, to July 29, 2019, for the fuel pumps and January 15, 2019, to July 29, 2019, for the restaurants and drive-thru coffee shops.

The St. Joseph, Maryville, and Chillicothe fuel pumps were impacted, the company says.

Grocery chain Hy-Vee has released a tool to help customers find out if they may have been affected by a previously disclosed data breach. No card information was taken from their checkout lines, convenience stores, pharmacies, customer service counters, wine and spirit locations, floral departments, clinics, or online aisles.

During the investigation, we removed the malware and implemented enhanced security measures, and we continue to work with cybersecurity experts to evaluate additional ways to enhance the security of payment card data.

Hy-Vee encouraged shoppers to closely monitor payment card statements and to notify financial institutions of any unauthorized charges.

Like this



07 October 2019
Sorry Politicians, TikTok Will Not Accept Your Political Ads
It's been downloaded more than a billion times around the world, with as many as 100 million of those downloads coming in the U.S. Facebook has tightened rules for political ads as part of efforts to prevent abuses.

07 October 2019
Novak Djokovic downs John Millman to win his first Japan Open title
And the 32-year-old earned the confidence boost he was looking for by winning the tournament without dropping a set. Even when there was an occasional glimmer of hope for Goffin, sublime defence helped Djokovic get out of trouble.

07 October 2019
Talks between UAW and GM take 'turn for the worse': union official
The strike involving more than 49,000 UAW members - including over 14,000 in MI - at GM plants across the country has now entered its third week.

07 October 2019
Liverpool welcomes Brendan Rodgers and Leicester City to Anfield
He said: "I honestly can't think of a tougher opponent to face in this moment at Anfield and I know they will be very motivated". The three-man midfield unit is also likely to remain unchanged, considering the magnitude of the game. "He's a top manager".

07 October 2019
BP CEO Bob Dudley to retire
Dudley is succeeded by Bernard Looney , who is now director of Upstream, the oil exploration and extraction division. From 2003 to 2008, Dudley was president and chief executive officer of Russian oil company TNK-BP.

07 October 2019
Call of Duty: Mobile Is A Big Hit
Headquartered in Santa Monica, California, Activision is a leading global producer and publisher of interactive entertainment. TiMi strives to create high quality, high fidelity and highly accessible games across a wide variety of genres.

07 October 2019
Browns' Beckham fined for fighting, questions NFL's system
Humphrey said after the game that it was Beckham who ought to have been shot out for the episode. Browns head coach Freddie Kitchens contested that Humphrey choked his wide receiver.

07 October 2019
LA Sparks fire manager over alleged racial comments
Head coach Derek Fisher , a questionable hire by Toler last offseason , oversaw a team that was severely outmatched by the Sun. The Sparks entered the playoffs as the third seed in the Western Conference but lost three straight games to the Sun.

07 October 2019
Facebook wants to track your exact location via Instagram
Those who don't want to bother typing in a Threads status all the time can turn on the " auto status " feature instead. It's also Facebook's latest competitor to Snapchat , which Instagram is fiercely competing against for younger users.

07 October 2019
Iron Man VR Hits PlayStation VR on February 28th 2020
Given the fact that the game is built from the ground up for VR, we doubled down on the storytelling strengths of virtual reality. The first story trailer of the title is already out as the VR game will be based on a unique original story.