Supervalu (NYSE:SVU) reported its second data breach in six weeks late Monday.
The Minneapolis-based retailer and wholesaler said an intruder installed malware into the portion of its computer network that processes payment-card transactions for Shop 'n Save, Shoppers Food & Pharmacy and corporate-owned and franchised Cub Foods stores.
The latest intrusion did not succeed in capturing data from any payment cards used at any stores other than possibly at four franchised Cub Foods stores in Hastings, Roseville, Shakopee and White Bear Lake, Minnesota, where implementation of enhanced protective technology had not yet been completed.
"We've taken measures to install enhanced protective technology that we believe significantly limited the ability of this malware to capture payment-card data, and we will continue to make these investments going forward," said Sam Duncan, Supervalu president and CEO in a statement.
However, malware may have been successful in capturing account numbers, expiration dates, other numerical information and/or cardholders' names, from transactions between Aug. 27 and Sept. 21 at the four Cub Foods stores, Supervalu said. Still, it has not determined whether any card data was stolen.
The four Cub Foods locations are offering customers who used payment cards during that period 12 months of complimentary consumer identification protection services through AllClear ID.
In August, Supervalu experienced a similar "criminal intrusion" into the portion of its computer network that processes credit and debit card payments for some of its stores. There was no confirmation that any cardholder data was, in fact, stolen and no evidence that the data was misused, according to the company.
The first breach occurred between June 22 and July 17 at 180 Supervalu stores and stand-alone liquor stores. Affected banners include Cub Foods, Farm Fresh, Hornbacher's, Shop 'n Save and Shoppers Food & Pharmacy.
Supervalu becomes latest data breach victim
Supervalu's future lies in wholesale
Home Depot breach affects 56M debit, credit cards
Target breach cost $148 million; tech hub opens in Silicon Valley
Retailers still unprepared for security breaches