Do you shop at HyVee grocery stores? Get ready for new credit cards!

[thewayne]

This is interesting. Their stores didn't get breached, but their peripheral services did: gas pumps, restaurants, drive-up coffee shops.

35 states, 5.3 million credit cards. The breach was announced on the 14th and the investigation is in early phrases, but the store is confident that the check-out lanes and pharmacy terminals were not compromised.

This is what pisses me off about cavalier attitudes when I'm told "just swipe your card". I DON'T WANT TO SWIPE MY CARD! THAT'S WHERE MY CARD INFO GETS STOLEN! I'm just about ready to tell businesses that if I can't use the chip reader, I'm not buying anything and turning around and walking.

https://krebsonsecurity.com/2019/08/breach-at-hy-vee-supermarket-chain-tied-to-sale-of-5m-stolen-credit-debit-cards/

Comments

[bibliofile]

Thanks for spreading the word. I saw that news, mainly because we have some in town and I look at their weekly ads. Fortunately, I haven't used my card in their hot food area/restaurant (we don't have the other things).

This is also why I try to pay cash instead of using a card in many places, e.g. Target.

[thewayne]

We don't have mega-stores here, so everything is normally paid at the front registers. Both Walmarts - a mega and neighborhood - do have gas pumps, but I don't use them.

We went through a spate with my wife's bank, a local/county-wide, when it seemed like they were replacing our cards every few months.

[silveradept]

It's never a question of if, but of when, and it seems like retailers and merchants aren't doing nearly enough to adopt methods that would make it far harder for thieves to steal the data.

Makes me also wonder how secure the Square terminals and the like are about encryption and making sure the data isn't stored somewhere inappropriate.

[thewayne]

I don't know about Square's security.  I know they have RFID reader and chip reader devices, but that you're most likely going to encounter swipe devices.  I would think that the ones plugged in to smart phone headphone jacks are pretty secure because you'd have to compromise the device.   But the big thing is that I haven't heard of any Square compromises, and I think that would be big news.