Hy-Vee investigates payment card data incident

Hy-Vee investigates payment card data incident

Hy-Vee Inc. said Wednesday that it’s investigating what appeared to be unauthorized activity on some of the company’s payment processing systems.

In a news release, Hy-Vee said the security incident involves systems focused on transactions at some Hy-Vee fuel pumps, drive-thru coffee shops and restaurants.

Hy-Vee spokeswoman Tina Potthoff said the company couldn’t say Wednesday whether or not any of the possibly compromised locations were in Wisconsin.

“We are not able to identify specific locations at this time as our investigation is ongoing,” Potthoff said in an email.

The release doesn’t say when the activity was detected, but said it was recent, and that the investigation is in its early stages. Hy-Vee notified federal law enforcement and the payment card networks when it discovered the issue, the company said.

“We believe the actions we have taken have stopped the unauthorized activity on our payment processing systems,” Hy-Vee said in a statement Wednesday.

The company explained that the fuel pumps, drive-thru coffee shops and restaurants — including Market Grilles, Market Grille Expresses and Wahlburgers locations that Hy-Vee owns and operates — have different point-of-sale systems than those located at Hy-Vee grocery stores, drugstores and inside Hy-Vee convenience stores, which utilize point-to-point encryption technology for processing payment card transactions. Hy-Vee said the encryption technology protects card data by making it unreadable.

“Based on our preliminary investigation, we believe payment card transactions that were swiped or inserted on these systems, which are utilized at our front-end checkout lanes, pharmacies, customer service counters, wine & spirits locations, floral departments, clinics and all other food service areas, as well as transactions processed through Aisles Online, are not involved,” Hy-Vee said.

Hy-Vee suggested that customers closely monitor payment card statements for any unauthorized activity and report anything suspicious to the financial institution that issued the card immediately.

For more information, visit hy-vee.com/protectingourcustomers.

Hy-Vee is based in West Des Moines, Iowa, and operates more than 240 retail stores in eight states including Illinois, Iowa, Kansas, Minnesota, Missouri, Nebraska, South Dakota and Wisconsin.

Get your weather forecast from people who actually live in your community. We update with short, easy-to-use video forecasts you can watch on your phone every day. Download the iOS or Android app here.