Payment card data stolen at hundreds of SuperValu, Inc. branches

Minnesota-based firm SuperValu, Inc. has revealed that any individual who has used their debit or credit cards in any of the firm’s 200 countrywide shops could have had their personal  data, mainly card details, compromised.

A press release revealed that between June 22nd and July 17th, customers who paid by card at SuperValu, Inc. retail outlets could have been victims of cyber criminals, who managed to access the company’s network responsible for handling card transactions.

Other data potentially stolen includes names and expiration dates, along with additional numerical information.

The number of payment cards affected has yet to be determined, but SuperValu, Inc. is notifying shoppers who were possible victims of the breach, in addition to providing them with 12 months of ID theft protection, free of charge.

Speaking to SCMagazine.com, the executive VP of the Americas for security software firm CyberArk, Adam Bosnian, commented:

“Every business should have controls in place that minimize and eliminate attackers from being able to exploit insider credentials. By taking steps like using analytics to determine anomalous privilege behaviour, or monitoring all privileged activity, we can get ahead of the breaches before they happen.”

Unfortunately, many companies don’t have such controls in place and are vulnerable to cyber crime. The only positive that can come out of such a breach is that it can make other firms aware of the damage they can cause, and prompt company bosses to take action. By opening up cyber security jobs, they will be taking the necessary steps to ensure company data remains safe and sound.