Data Breach at Magnolia Albertsons
Posted on August 28th, 2014 by Sara
We received this from an MV reader who wishes to remain anonymous:
I just got a call from my bank that there was a data breach at Albertsons. My debit card was one of the cards indicated at risk. I googled it and it looks like ultimately both debit and credit numbers were stolen from Albertsons and Supervalu stores all over the region. I have not seen any suspicious transactions, but they are replacing the card as a precaution. This whole data breach thing as the new norm just stinks.
We recently learned of an unlawful intrusion to obtain credit and debit card payment information in some of our stores, which could include name, account number, expiration date or other numerical information. Importantly, sensitive information (like Social security numbers, birthdates or driver’s license information), and other personal information were not affected, because that information is not collected as part of the payment process.
The appropriate federal law enforcement authorities have been notified, and we are working closely with our IT services provider, SUPERVALU, to better understand the nature and scope of the incident. Third-party data forensics experts are supporting an ongoing investigation. We have not determined that any cardholder data was in fact stolen, and currently have no evidence of any misuse of any such data. We believe that the intrusion has been contained and are confident that our customers can safely use their credit and debit cards in our stores.
Importantly, we do not believe that any customer data was taken. However, out of an abundance of caution, if you used your credit or debit card in our stores between June 22, 2014 and July 17, 2014 you should monitor your credit and debit card account and contact the bank that issued your payment card immediately if you see suspicious activity.
We spoke with a representative for Albertsons Corporate earlier this morning. She says:
“The good news is that there is no evidence that data has been stolen. The best thing for Albertsons customers to do is monitor your account. If you notice anything, first contact your bank.”
Albertsons’ website has a section that addresses the breach- here is some info that may be helpful if you shopped at the store during the time of the breach:
Q: When did this event happen and what did Albertsons do about it?
Based on our current investigation, it appears that the unauthorized access may have started as early as June 22, 2014 in our stores, and action was taken to contain the incident July 17, 2014. The appropriate federal authorities have been notified. We are working closely with our IT services provider, SUPERVALU.Third-party forensics experts are supporting an ongoing investigation. From information we have at this time, we do not believe that any customer data was taken.
Q: Am I at risk for identity theft or fraudulent use of my credit card?
It is unlikely that you are at risk of identity theft due to this incident. Generally, identity theft requires criminals to have access not only to your name and credit card information, but also your Social Security Number. That information is not captured in our payment process and could not have been accessed in this incident.
Q: Who should I call if I see suspicious activity in my bank or credit account transactions?
If you see unusual or suspicious activity on a payment card that you used at our store, you should immediately call the phone number on the back of that card to report it to the issuing bank. They can walk you through the steps to dispute the charges and protect your financial accounts.
Q: I received a call, text or e-mail from someone who said they were from Albertsons asking for my social security number, credit card number, and/or other personal information. What should I do?
We do not request this type of information by phone, text or email, so you should not respond. Identity thieves often try to take advantage of situations like this. Please take down their information and report this scam to the authorities.
Q: What are you doing so it doesn’t happen again?
We are committed to protecting the security of our customer’s personal data, and we are working closely with SUPERVALU to implement additional security measures to reduce the likelihood that no such incident ever happens again.
Q: What protections are being offered by Albertsons?
We are taking steps to protect your credit and debit card information. We will be providing one year of complimentary identity protection to affected customers. This coverage includes automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, simply call 1-855-865-4449 after Tuesday, August 19th, Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that includes identity theft monitoring and a $1 million identity theft insurance policy will also be available. At that time more information about these services will be available at https://abacquisition.allclearid.com.
Q: If I have additional questions, who can I contact?
Beginning August 19, you may call our toll-free customer information hotline at 1-855-865-4449 Monday through Saturday from 8:00am-8:00pm CT and a dedicated security professional will assist you in protecting your credit information. You can also reach out to us through Facebook www.facebook.com/albertsons or through our website, www.albertsons.com.