Market Mixx

MarketMixx - Home

get your fix

Albertsons Market Mixx Blog Home

AB Acquisition LLC Announces Discovery of Separate Criminal Incident Involving Payment Card Data Processing

Christine

/

Sep 29th, 2014

Corporate Newsroom

To date, there has not been a determination that any payment card data was stolen.

BOISE, ID – September 29, 2014 – AB Acquisition LLC, which operates Albertsons stores under Albertson’s LLC and ACME Markets, Jewel-Osco, and Shaw’s and Star Markets under New Albertson’s, Inc., recently was notified by its third party IT services provider SUPERVALU of a separate, more recent, attempted criminal intrusion seeking  to obtain payment card information used in some of its stores. The Company has been informed that different malware was used in this recently discovered incident than was used in the incident previously announced on August 14, 2014. The investigations into both this incident and the earlier incident are ongoing.

AB Acquisition promptly notified federal law enforcement authorities of this separate criminal incident, which apparently occurred in late August or early September 2014 and is cooperating in the efforts to investigate the matter and identify those responsible.  Third party data forensics experts are supporting the investigation.  We have also notified the major payment card brands of this incident.

The new malware may have captured account numbers, expiration date, other numerical information and/or the cardholder’s name.  At this time there has not been a determination that any payment card data was in fact stolen as a result of either incident. Measures have been taken to prevent further use of this new and different malware in the affected store locations. We are also implementing additional measures to enhance the protection of customer payment card data.

Because the point of sale systems are different across AB Acquisition divisions, Albertsons stores in Arizona, Arkansas, Colorado, Florida, Louisiana, New Mexico, Texas and our two Super Saver Foods Stores in Northern Utah were not impacted by this incident. However, Albertsons stores in Southern California, Idaho, Montana, North Dakota, Nevada, Oregon, Washington, Wyoming and Southern Utah were impacted. In addition, ACME Markets in Pennsylvania, Maryland, Delaware and New Jersey; Jewel-Osco stores in Iowa, Illinois and Indiana; and Shaw’s and Star Markets stores in Maine, Massachusetts, Vermont, New Hampshire and Rhode Island were affected by this new incident.

“We take our responsibility to protect our customers’ payment card data seriously,” said Bob Miller, Chief Executive Officer at AB Acquisition LLC. “We sincerely regret that our customers’ data was targeted. As a company, our decisions are always focused on what is best for our customers, and we know this issue has inconvenienced them and caused concern. We are taking appropriate measures to enhance the protection of our customers’ payment card data. We are working closely with all parties on the investigation into this incident.”

Given the continuing nature of the investigations, it is possible that further details on time frames, and locations, in addition to that described above, will be identified in the future.

A customer FAQ is available on the websites at albertsons.com, acmemarkets.com, jewelosco.com, and shaws.com. Although it has not yet been determined whether any cardholder data was in fact stolen, AB Acquisition LLC is extending 12 months of complimentary consumer identity protection services through AllClear ID to customers whose payment cards may have been affected by this second attempt.  At this early stage of the investigation, we are providing customers who shopped with us from August 27, 2014 through September 21, 2014 these identity protection services. Customers may visit the websites listed above for further information about the incident and about complimentary consumer identity protection services being offered, or call AllClear ID at 1-855-865-4449.

A free copy of your credit report can also be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228.  Hearing impaired consumers can access TDD services at 877-730-4104.  We encourage you to monitor these reports, as well as your credit and debit card statements.  You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

About AB Acquisition LLC

Established in 2006, AB Acquisition LLC (“Albertsons”), which operates ACME, Albertsons, Jewel-Osco, Lucky, Shaws, Star Market and Super Saver, and stores under the United Family of stores, Amigos, Market Street and United Supermarkets, is working to become the favorite food and drug retailer in every market it serves. The company is privately owned by Cerberus Capital Management, Kimco Realty Corporation, Klaff Realty, Lubert-Adler Partners, and Schottenstein Stores Corporation, and operates 1,081 stores and 14 distribution centers in 29 states and employs approximately 127,000 associates. For more information, please visit www.Albertsons.com.

# # #

You may also contact the Federal Trade Commission for more information toll-free at 1-877-ID-THEFT (438-4338) (TTY: 1-866-653-4261), by email at http://www.consumer.ftc.gov/features/feature-0014-identity-theft, or writing to Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.

A free copy of your credit report can be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228.  Hearing impaired consumers can access TDD services at 877-730-4104.  We encourage you to monitor these reports, as well as your credit and debit card statements.  You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

EquifaxP.O. Box 740241Atlanta, GA 30374888-766-0008

www.equifax.com

ExperianP.O. Box 9554Allen, TX 75013888-397-3742

www.experian.com

TransUnion P.O. Box 6790Fullerton, CA 92834800-680-7289

www.transunion.com

 

A security freeze will prevent new credit from being opened in your name without the use of a personal identification number or password that will be issued by the credit bureaus after you initiate the freeze.  A security freeze will also prevent potential creditors from accessing your credit report without your authorization.  However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, mortgages, employment, housing or other services. In order to place a security freeze, you may be required to provide the credit bureaus with information that identifies you, including your full name, social security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement.  Credit bureaus may charge a fee up to $10 to place, lift, or remove the security freeze; however, this fee may be less in certain states (in MA, up to $5) or waived if you are the victim of identity theft and you provide a valid police report.  You must separately place a security freeze on your credit file with each credit reporting agency.

Filing a Police Report for Suspicious Activity:

If you do find suspicious activity on the credit or debit card indicated in our notice to you or in your credit report, call your local police or sheriff’s office and file a police report of identity theft.  Get a copy of the police report.  You may need to give copies of the police report to creditors to clear up your records.  In addition, you should report identity theft to your Attorney General and the Federal Trade Commission.

For Maryland Residents: The Maryland Attorney General provides information regarding identity theft at http://www.oag.state.md.us/idtheft/index.htm.   You may also contact the Identity Theft Unit at (410) 576-6491, by email at idtheft@oag.state.md.us, and by mail at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202.

 

Media Contact: Christine Wilcox

christine.wilcox@albertsons.com | 208-395-4163

23 Responses to AB Acquisition LLC Announces Discovery of Separate Criminal Incident Involving Payment Card Data Processing

  1. Cindy 29/09/2014 at 3:55 pm

    Wow. You still don’t know what was stolen from the first intrusion and now there is another? Pretty amazing. And very disappointing.

    • Christine Christine 15/10/2014 at 9:55 am

      Hi Cindy, Thank you for your candor. We deeply regret that we have disappointed our customers because we work hard to earn your trust. Unfortunately, Albertsons is just one of many recent targets of criminal attempts to steal customer credit and debit card data. We have been working with law enforcement and the company that processes payment cards for us to investigate and to implement additional security measures that minimize the risk posed to our customers. The investigations into both incidents are ongoing. To date, we have not determined that any data was in fact stolen.

      Out of an abundance of caution, Albertsons is providing one year of complimentary identity protection to affected customers. This coverage includes automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, you can simply call 1-855-865-4449, Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you. Additional identity protection services that include identity theft monitoring and a $1 million identity theft insurance policy are also available. You can access the enrollment form at https://abacquisition.allclearid.com.

      Thanks,
      Chris

  2. Dan Adams 29/09/2014 at 7:06 pm

    You’ve got to be kidding me. You already knew that there were problems with a previous security breach and yet you failed to take necessary steps to protect me and other customers? I should say “former” customers because I for one will not shop at Albertsons ever again (and I have been a very loyal customer … if you still had your loyalty card program, you’d know). Here in Palm Springs there is a Stater Bros. grocery store across the street from Albertson and a Ralphs and Fresh and Easy within a half mile. I will go to those stores that care more about my security than Albertsons apparently does.

    • Christine Christine 15/10/2014 at 9:50 am

      Dear Dan, We take our responsibility to our customers seriously, and deeply regret that we have disappointed you. Unfortunately, criminal attempts to steal customer credit and debit card data from retailers are becoming more frequent and more sophisticated. Albertsons is one of many recent targets. We know our customers are concerned about the security of their payment card data, and we work hard to protect it. From the moment we learned of the first incident, we have been working with law enforcement and the company that processes payment cards for us to investigate and to implement additional security measures that minimize the risk posed to our customers.

      Please know that we appreciate your honest feedback and hope that we will be able to demonstrate that we are a company worthy of your business once again in the very near future.

      Thanks,
      Chris

  3. Debi Ziemba 30/09/2014 at 7:19 am

    Question..as a regular Shopper & ALWAYS using our Discover credit card…..should we have Discover issue a new card/account number?
    Thank You!!
    Debi Z

    • Christine Christine 15/10/2014 at 9:49 am

      Hi Debi, To date, we have not determined that any data was in fact stolen; if you see unusual or suspicious activity on a payment card that you used at our store, you should immediately call the phone number on the back of that card to report it to the issuing bank. They can walk you through the steps to dispute the charges and protect your financial accounts. You may call our toll-free customer information hotline at 1-855-865-4449 Monday through Saturday from 8:00am-8:00pm CT and a dedicated security professional can assist you with any additional questions you may have.

      Thanks,
      Chris

  4. Nora Drysch 30/09/2014 at 8:07 am

    TV is advertising that Jewel/Osco is offering free credit monitoring because of the recent multiple breaches and to visit the site for more info. Where/how do I sign up? Neither this site nor the Jewel/Osco one indicates any such offer, just the same general info above.

    • Christine Christine 30/09/2014 at 9:31 am

      Hi Nora, here is the information from the Jewel-Osco FAQ page at http://www.jewelosco.com/recent-update/:

      Although it has not yet been determined whether any payment card data was in fact stolen, we are providing one year of complimentary identity protection to affected customers. In an abundance of caution since it is early in the investigation, if you shopped at one of our affected stores between June 22, 2014 and July 17, 2014 or between August 27, 2014 and September 21, 2014, you will receive automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, simply call 1-855-865-4449 Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that includes identity theft monitoring and a $1 million identity theft insurance policy is also available. More information about these services may be found at https://abacquisition.allclearid.com.

      I hope this is helpful.

      Thanks,
      Christine

  5. Supervalu, Albertsons disclose new data breach 30/09/2014 at 11:17 am

    […] The company said it will offer 12 months of identity protection services to anyone whose information might have been compromised. More information on the breach can be found here. […]

  6. Al Brosmith 30/09/2014 at 11:17 am

    Seriously, another payment card breech??? How is that possible? What steps were taken from the last breech to prevent this, and why didn’t they work?
    It appears Albertsons didn’t learn from the Target incident.
    Off to Marianos, they seem to value the security of their customers.

    • Christine Christine 15/10/2014 at 9:46 am

      Dear Al, We recently learned from our IT services provider, SUPERVALU, that it appears a criminal intruder installed different malware on payment card systems in late August or early September 2014. The investigation into these events is ongoing. From information we have at this time, there has been no determination that any customer data was stolen as a result of either incident.

      Measures have been taken to prevent further use of this new and different malware in the affected store locations. We are also implementing additional measures to enhance the protection of customer payment card data. We take our responsibility to our customers seriously, and deeply regret that we have disappointed you. Please know that we appreciate your honest feedback and hope that we will be able to demonstrate that we are a company worthy of your business once again in the very near future.

      Thanks,
      Christine

  7. Linda Madrid 30/09/2014 at 12:11 pm

    I live across the street from Albertsons in So. Calif. and shop the store frequently. I always use my debit card and occasionally my credit card. How can I get the debit/credit card protection? I’m concerned after hearing the report on the news this morning.

    • Christine Christine 15/10/2014 at 9:45 am

      Hi Linda,
      You can reach AllClear at 1-855-865-4449, Monday through Saturday from 8:00am-8:00pm CT. They have dedicated investigators who can assist you in restoring your identity to its accurate state should an issue arise. Additional identity protection services that include identity theft monitoring and a $1 million identity theft insurance policy are also available. You can access the enrollment form at https://abacquisition.allclearid.com.

      Thanks,
      Christine

  8. tracy klaus 30/09/2014 at 10:17 pm

    which stores in Montana were affected?

    • Customer Care 03/10/2014 at 4:34 pm

      Hi Tracy. Albertsons stores in Montana were affected by the Point Of Sale Incident. If you shopped at one of these stores, please call 1-855-865-4449 and a dedicated security professional will assist you in protecting your credit information. ~Shawna

  9. James Butts 01/10/2014 at 2:15 am

    I want to know if my account info was taken?

    • Christine Christine 15/10/2014 at 9:44 am

      Hi James,
      We recently learned from our IT services provider, SUPERVALU, that it appears a criminal intruder installed different malware on payment card systems in late August or early September 2014. The investigation into these events is ongoing. From information we have at this time, there has been no determination that any customer data was stolen as a result of either incident.

      Measures have been taken to prevent further use of this new and different malware in the affected store locations. We are also implementing additional measures to enhance the protection of customer payment card data. Out of an abundance of caution, Albertsons is providing one year of complimentary identity protection to affected customers. This coverage includes automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, you can simply call 1-855-865-4449, Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that include identity theft monitoring and a $1 million identity theft insurance policy are also available. You can access the enrollment form at https://abacquisition.allclearid.com.

      Thanks
      Christine

  10. Cindy 09/10/2014 at 8:54 am

    When can we hope to find out what information was taken from this breach and the one that took place over three months ago? You and your third party provider Supervalu seem slow to disclose information.

    • Customer Care 11/10/2014 at 2:01 pm

      Dear Cindy – I understand that the process can seem to be very slow, but the investigations into both of these incidents are ongoing, and to date, we still have not determined that any data was in fact stolen. As we have updates from the investigation, we will post them at http://www.albertsons.com/recent-update/.

  11. Chris 27/12/2014 at 5:04 pm

    In the earlier press release, it indicates Southern California stores were breached. Do you have a list of affected stores in Santa Barbara, CA area? I regularly shop at Albertson’s weekly.
    Would you also be able to confirm that Apple Pay is available to use at your stores (particularly in Santa Barbara area)?

  12. Dirk Williams 02/02/2016 at 12:33 pm

    Why is it that we were never contacted by Albertsons, to tell us our card was compromised? Did you figure we just don’t matter?

    We’re getting ready to head to Europe, and am JUST being notified by my credit union. This is unexceptable.

    Mr Williams

    • Customer Support 03/02/2016 at 4:17 pm

      Dirk, we’d like to address this. Where did you make your purchase? We also welcome you to contact our Payment Services Department at 1-800-898-4027. Their hours of operation are:
      Monday – Friday 5:00 AM – 9:30 PM
      Saturday – 6:00 AM – 9:00 PM
      Sunday – 7:00 AM – 8:00 PM
      We look forward to hearing from you. -Rebecca, Customer Support

Leave a Reply



|