Skip to main content

Hackers hit SuperValu again; this time only 4 Cub stores affected


SuperValu says the good news about its latest data breach is that the company's new protection against malicious software worked.

The bad news is four Twin Cities-area stores hadn't finished installing it.

Eden Prairie-based SuperValu announced Monday that hackers again broke into its computer system and unleashed malware in the part of the network that processes payment cards.

The company says this latest intrusion is separate from the data breach it announced last month.

The one that occurred in June and July compromised the payment card data of customers at more than 200 stores in SuperValu's national network, the Business Journal reports.

This time, SuperValu says, new technology prevented the malware from capturing payment card data – with the possible exception of some checkout lanes at Cub Foods stores in White Bear Lake, Shakopee, Roseville and Hastings.

As the Pioneer Press reports, the company says the latest intrusion likely occurred from late August through September 21. SuperValu is offering customers who shopped at the affected stores 12 months of identity protection services through AllClear ID.

But the company sounded pleased with the protection provided by its new technology.

President and CEO Sam Duncan said in SuperValu's statement: “We’ve taken measures to install enhanced protective technology that we believe significantly limited the ability of this malware to capture payment card data, and we will continue to make these investments going forward.”

Fortune says SuperValu's stock price fell 1.8 percent on Monday and was down another 1.5 percent in after-hours trading during the evening.

Hackers using malware to gain access to the payment card information of customers have struck a number of retailers, starting with Target late last year and more recently affecting companies ranging from Home Depot to Jimmy John's.

This summer the Department of Homeland Security issued an alert to retailers about a malware known as Backoff. Security officials say businesses may have had their point-of-sale systems infected without being aware of it.

What can business owners do to protect themselves? The New York Times, Forbes, and TransFirst are among those who have offered suggestions recently.

Next Up

940 Margaret St, St Paul, MN 55106, United States - May 2019 (1)

4-year-old girl struck by hit-and-run driver in St. Paul

The girl was struck by the driver around 5 p.m. Monday.

Minneapolis police

Baby found safe inside car that was stolen in south Minneapolis

The incident happened near 32nd Street and Chicago Avenue around 7 p.m.

Anthony Edwards

Ant puts on a show to help Timberwolves beat Pacers

A third-quarter surge gave the Timberwolves their seventh win in their past eight games.

Mikko Koivu

Wild to retire Mikko Koivu's No. 9 jersey

Koivu will be the first player in franchise history to have his number retired.

Boebert-Omar - Flickr Gage Skidmore

Rep. Boebert refuses to apologize for Islamophobic comment toward Rep. Omar

A phone call Monday between the two lawmakers ended abruptly.

Patrick Peterson

Vikings place Patrick Peterson on COVID-19/reserve list

The Vikings cornerback said he was vaccinated in August.

flickr - thin ice warning - USFWS Midwest

'Numerous' reports of eager anglers falling through ice

Conditions are still unpredictable, and can vary even across a single body of water.


Minnesota health officials watching closely for omicron variant

Health leaders do not yet know how transmissible or severe the new variant is.

school bus stop pixabay

School bus driver charged in fatal hit-and-run will plead guilty

Another motorist told the driver to call 911, but he instead got on the bus and drove off, charges say.

Franconia Sculpture Park - Lorie Shaull - Flickr

5 outdoor destinations to explore around the Twin Cities

There's something for everyone on this list of overlooked spots.

Child mental health counseling

As pandemic continues, so do efforts to improve child mental health access

Children's Minnesota has announced it will open its first inpatient mental health facility for under 18s.

Dalvin Cook

Mixed reports on Dalvin Cook's injury status

The Vikings running back could miss two games...or he could play Sunday.