WHAT YOU NEED TO KNOW: Albertsons announces ANOTHER data breach - Spokane, North Idaho News & Weather KHQ.com

WHAT YOU NEED TO KNOW: Albertsons announces ANOTHER data breach

Posted: Updated:
The parent companies of the Supervalu and Albertsons supermarkets say they have uncovered another breach of their computer networks, potentially compromising data from consumers. The parent companies of the Supervalu and Albertsons supermarkets say they have uncovered another breach of their computer networks, potentially compromising data from consumers.
SPOKANE, Wash. -

UPDATE: KHQ has confirmed with Albertson's that all locations in Washington, Idaho and Montana were impacted by the most recent breach. Each of those locations were also part of a separate breach this past summer.

The company says at this time it can't say whether any customer credit or debit card data was stolen, but it's working with investigators to determine that.

The supermarket chain says it doesn't have a timeline for determining what, if anything, was stolen.

PREVIOUS COVERAGE: Albertson's announced this week another breach of their computer networks that may have put customers data at risk. 

Albertson's supermarkets said sometime in late August or early September, malicious software was installed on networks that process credit and debit card transactions at some of their stores. Captured data may include account numbers, card expiration dates and the names of cardholders. SuperValu said it believes most of its stores were not affected. 

Earlier in August, there was another data breach, but the parent companies for both SuperValu and Albertson's said the two incidents are separate. 

Stores in Washington, Idaho, California, Oregon, Montana, North Dakota, Nevada, Wyoming and Utah were affected. 

Below is the entire press release sent out by Albertson's on Monday: 

To date, there has not been a determination that any payment card data was stolen.

BOISE, ID – September 29, 2014 – AB Acquisition LLC, which operates Albertson's stores under Albertson's LLC and ACME Markets, Jewel-Osco, and Shaw's and Star Markets under New Albertson's, Inc., recently was notified by its third party IT services provider SUPERVALU of a separate, more recent, attempted criminal intrusion seeking to obtain payment card information used in some of its stores. The Company has been informed that different malware was used in this recently discovered incident than was used in the incident previously announced on August 14, 2014. The investigations into both this incident and the earlier incident are ongoing.

AB Acquisition promptly notified federal law enforcement authorities of this separate criminal incident, which apparently occurred in late August or early September 2014 and is cooperating in the efforts to investigate the matter and identify those responsible. Third party data forensics experts are supporting the investigation. We have also notified the major payment card brands of this incident.

The new malware may have captured account numbers, expiration date, other numerical information and/or the cardholder's name. At this time there has not been a determination that any payment card data was in fact stolen as a result of either incident. Measures have been taken to prevent further use of this new and different malware in the affected store locations. We are also implementing additional measures to enhance the protection of customer payment card data.

Because the point of sale systems are different across AB Acquisition divisions, Albertson's stores in Arizona, Arkansas, Colorado, Florida, Louisiana, New Mexico, Texas and our two Super Saver Foods Stores in Northern Utah were not impacted by this incident. However, Albertson's stores in Southern California, Idaho, Montana, North Dakota, Nevada, Oregon, Washington, Wyoming and Southern Utah were impacted. In addition, ACME Markets in Pennsylvania, Maryland, Delaware and New Jersey; Jewel-Osco stores in Iowa, Illinois and Indiana; and Shaw's and Star Markets stores in Maine, Massachusetts, Vermont, New Hampshire and Rhode Island were affected by this new incident.

“We take our responsibility to protect our customers' payment card data seriously,” said Bob Miller, Chief Executive Officer at AB Acquisition LLC. “We sincerely regret that our customers' data was targeted. As a company, our decisions are always focused on what is best for our customers, and we know this issue has inconvenienced them and caused concern. We are taking appropriate measures to enhance the protection of our customers' payment card data. We are working closely with all parties on the investigation into this incident.”

Given the continuing nature of the investigations, it is possible that further details on time frames, and locations, in addition to that described above, will be identified in the future.

A customer FAQ is available on the websites at Albertson's.com, acmemarkets.com, jewelosco.com, and shaws.com. Although it has not yet been determined whether any cardholder data was in fact stolen, AB Acquisition LLC is extending 12 months of complimentary consumer identity protection services through AllClear ID to customers whose payment cards may have been affected by this second attempt. At this early stage of the investigation, we are providing customers who shopped with us from August 27, 2014 through September 21, 2014 these identity protection services. Customers may visit the websites listed above for further information about the incident and about complimentary consumer identity protection services being offered, or call AllClear ID at 1-855-865-4449.

A free copy of your credit report can also be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228. Hearing impaired consumers can access TDD services at 877-730-4104. We encourage you to monitor these reports, as well as your credit and debit card statements. You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

About AB Acquisition LLC

Established in 2006, AB Acquisition LLC (“Albertson's”), which operates ACME, Albertson's, Jewel-Osco, Lucky, Shaws, Star Market and Super Saver, and stores under the United Family of stores, Amigos, Market Street and United Supermarkets, is working to become the favorite food and drug retailer in every market it serves. The company is privately owned by Cerberus Capital Management, Kimco Realty Corporation, Klaff Realty, Lubert-Adler Partners, and Schottenstein Stores Corporation, and operates 1,081 stores and 14 distribution centers in 29 states and employs approximately 127,000 associates. For more information, please visit www.Albertson's.com.

# # #

You may also contact the Federal Trade Commission for more information toll-free at 1-877-ID-THEFT (438-4338) (TTY: 1-866-653-4261), by email at http://www.consumer.ftc.gov/features/feature-0014-identity-theft, or writing to Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.

A free copy of your credit report can be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228. Hearing impaired consumers can access TDD services at 877-730-4104. We encourage you to monitor these reports, as well as your credit and debit card statements. You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

EquifaxP.O. Box 740241Atlanta, GA 30374888-766-0008

www.equifax.com

ExperianP.O. Box 9554Allen, TX 75013888-397-3742

www.experian.com

TransUnion P.O. Box 6790Fullerton, CA 92834800-680-7289

www.transunion.com

A security freeze will prevent new credit from being opened in your name without the use of a personal identification number or password that will be issued by the credit bureaus after you initiate the freeze. A security freeze will also prevent potential creditors from accessing your credit report without your authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, mortgages, employment, housing or other services. In order to place a security freeze, you may be required to provide the credit bureaus with information that identifies you, including your full name, social security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. Credit bureaus may charge a fee up to $10 to place, lift, or remove the security freeze; however, this fee may be less in certain states (in MA, up to $5) or waived if you are the victim of identity theft and you provide a valid police report. You must separately place a security freeze on your credit file with each credit reporting agency.

Filing a Police Report for Suspicious Activity:

If you do find suspicious activity on the credit or debit card indicated in our notice to you or in your credit report, call your local police or sheriff's office and file a police report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. In addition, you should report identity theft to your Attorney General and the Federal Trade Commission.

For Maryland Residents: The Maryland Attorney General provides information regarding identity theft at http://www.oag.state.md.us/idtheft/index.htm. You may also contact the Identity Theft Unit at (410) 576-6491, by email at idtheft@oag.state.md.us, and by mail at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202.


  • Most Popular StoriesMost Popular StoriesMore>>

  • Police impersonator attempts to pull over Spokane woman

    Police impersonator attempts to pull over Spokane woman

    Monday, September 17 2018 8:45 PM EDT2018-09-18 00:45:37 GMT

    SPOKANE, Wash. - "He told me to pull over, and my jaw just dropped," a Spokane woman, who says a fake police officer tried to pull her over, doesn't want to be named. In fear, this could happen again. "It really scared me and kind of threw me off that night. I don't even want to drive by myself anymore," she said. She tells me that she was driving around North Spokane at night on her way home from work. 

    >>

    SPOKANE, Wash. - "He told me to pull over, and my jaw just dropped," a Spokane woman, who says a fake police officer tried to pull her over, doesn't want to be named. In fear, this could happen again. "It really scared me and kind of threw me off that night. I don't even want to drive by myself anymore," she said. She tells me that she was driving around North Spokane at night on her way home from work. 

    >>
  • Report: Olympia woman refuses to pull over for WSP trooper because she drives a Prius

    Report: Olympia woman refuses to pull over for WSP trooper because she drives a Prius

    Monday, September 17 2018 1:45 PM EDT2018-09-17 17:45:44 GMT

    MARYSVILLE, Wash. - An Olympia woman wouldn't pull over for a Washington State Patrol trooper because she drives a Prius, according to an arrest report.

    >>

    MARYSVILLE, Wash. - An Olympia woman wouldn't pull over for a Washington State Patrol trooper because she drives a Prius, according to an arrest report.

    >>
  • Police: Man killed by Cheney officers planned death

    Police: Man killed by Cheney officers planned death

    Tuesday, September 18 2018 1:27 AM EDT2018-09-18 05:27:11 GMT

    SPOKANE, Wash. (AP) - Court documents indicate that a man who was killed by Cheney police officers earlier this month had reported himself to police the evening of the shooting. The Spokesman-Review reports 40-year-old Steve Anderson was shot by three officers in a grocery store parking lot after police say he was wielding a knife and moved toward officers. 

    >>

    SPOKANE, Wash. (AP) - Court documents indicate that a man who was killed by Cheney police officers earlier this month had reported himself to police the evening of the shooting. The Spokesman-Review reports 40-year-old Steve Anderson was shot by three officers in a grocery store parking lot after police say he was wielding a knife and moved toward officers. 

    >>
HD DOPPLER 6i
/
  • Top Stories from KHQHomeMore>>

  • 15-year-old taken into custody after driving drunk with baby in car

    15-year-old taken into custody after driving drunk with baby in car

    Tuesday, September 18 2018 10:50 AM EDT2018-09-18 14:50:39 GMT

    Police in Wisconsin say they pulled a 15-year-old boy over for reckless driving and discovered the teen was drunk and had a baby in the back seat.    Mount Pleasant police say the baby's mother and another teen in the car were also intoxicated. Sgt. Eric Relich says police responded to a report of a reckless driver about 10:30 p.m. Sunday. Relich says someone saw the driver swerving and driving into oncoming traffic.

    >>

    Police in Wisconsin say they pulled a 15-year-old boy over for reckless driving and discovered the teen was drunk and had a baby in the back seat.    Mount Pleasant police say the baby's mother and another teen in the car were also intoxicated. Sgt. Eric Relich says police responded to a report of a reckless driver about 10:30 p.m. Sunday. Relich says someone saw the driver swerving and driving into oncoming traffic.

    >>
  • ACLU accusing Facebook of gender discrimination in ads

    ACLU accusing Facebook of gender discrimination in ads

    Tuesday, September 18 2018 10:46 AM EDT2018-09-18 14:46:15 GMT

    The ACLU is accusing Facebook of discrimination, saying the company violated federal and state laws prohibiting businesses from excluding women from job ads.    In a complaint filed Tuesday with the Equal Employment Opportunity Commission, the ACLU also lists 10 employers that it claims have placed discriminatory ads.

    >>

    The ACLU is accusing Facebook of discrimination, saying the company violated federal and state laws prohibiting businesses from excluding women from job ads.    In a complaint filed Tuesday with the Equal Employment Opportunity Commission, the ACLU also lists 10 employers that it claims have placed discriminatory ads.

    >>
  • Man accused of assault after putting wife with dementia on leash

    Man accused of assault after putting wife with dementia on leash

    Tuesday, September 18 2018 10:40 AM EDT2018-09-18 14:40:20 GMT

    A Maryland man is facing a simple assault charge after using a dog leash to lead his wife around a Pennsylvania fair because she has late-stage dementia.    West Manchester police say Walter Wolford yanked the 8-inch long red nylon leash, causing his wife's head to jerk back and leave red marks around her throat. But the 66-year-old Hagerstown man says he only gently tugged on the leash, which he uses to keep his wife from getting lost.    

    >>

    A Maryland man is facing a simple assault charge after using a dog leash to lead his wife around a Pennsylvania fair because she has late-stage dementia.    West Manchester police say Walter Wolford yanked the 8-inch long red nylon leash, causing his wife's head to jerk back and leave red marks around her throat. But the 66-year-old Hagerstown man says he only gently tugged on the leash, which he uses to keep his wife from getting lost.    

    >>