争议事件
以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。
返回词条共 1 条
2019
Hy-Vee公布支付卡数据泄露补充信息
问题披露
Hy-Vee公布了支付卡事件的补充信息。该公司称，在部分支付处理系统发现未经授权的活动后，调查发现恶意软件曾在部分加油泵、免下车咖啡店和餐厅试图获取支付卡数据。Hy-Vee表示已移除恶意软件、实施加强的安全措施，并将通知能够识别出的受影响客户。
品牌回应
调查 — Hy-Vee
After detecting unauthorized activity on some of our payment processing systems on July 29, 2019, we immediately began an investigation and leading cyber security firms were engaged to assist.
整改 — Hy-Vee
During the investigation, we removed the malware and implemented enhanced security measures, and we continue to work with cyber security experts to evaluate additional ways to enhance the security of payment card data.
持续披露 — Hy-Vee
For those customers Hy-Vee can identify as having used their card at a location involved during that location's specific timeframe and for whom Hy-Vee has a mailing address or email address, Hy-Vee will be mailing them a letter or sending them an email.
来源摘录
The investigation identified the operation of malware designed to access payment card data from cards used on point-of-sale (“POS”) devices at certain Hy-Vee fuel pumps, drive-thru coffee shops, and restaurants (which include our Hy-Vee Market Grilles, Hy-Vee Market Grille Expresses and the Wahlburgers locations that Hy-Vee owns and operates, as well as the cafeteria at Hy-Vee’s West Des Moines corporate office).
The malware searched for track data (which sometimes has the cardholder name in addition to card number, expiration date, and internal verification code) read from a payment card as it was being routed through the POS device.