Hy-Vee reveals investigation into card data incident

News

DES MOINES, Iowa — Hy-Vee has launched an investigation into a data incident involving its payment processing systems.

The corporation said there has been recent unauthorized activity on some of its payment processing systems and officials immediately began an investigation, involving cyber security firms. They also notified federal law enforcement and the payment card networks.

“We believe the actions we have taken have stopped the unauthorized activity on our payment processing systems. Our investigation is focused on card transactions at our fuel pumps, drivethru coffee shops, and restaurants (which include our Market Grilles, Market Grille Expresses and the Wahlburgers locations that Hy-Vee owns and operates),” officials said in a statement.

The statement continues:

These locations have different point-of-sale systems than those located at our grocery stores, drugstores and inside our convenience stores, which utilize point-topoint encryption technology for processing payment card transactions. This encryption technology protects card data by making it unreadable. Based on our preliminary investigation, we believe payment card transactions that were swiped or inserted on these systems, which are utilized at our front-end checkout lanes, pharmacies, customer service counters, wine & spirits locations, floral departments, clinics and all other food service areas, as well as transactions processed through Aisles Online, are not involved.

Hy-Vee corporation

Hy-Vee said there is no additional information at the moment because the investigation is still in early stages. They said they will provide notifications to customers once they get clarity about the specific time frames and locations that may have been involved.

The supermarket has locations in Peoria, Canton, Bloomington, and Galesburg. There are more than 240 locations throughout eight Midwestern states.

Copyright 2019 Nexstar Broadcasting, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Don't Miss