Numerous Hy-Vee Locations Hit By Malware

COLUMBUS- Hy-Vee is providing additional information about a payment card incident that was first reported on August 14.

After detecting unauthorized activity on payment processing systems on July 29, Hy-Vee immediately began an investigation. The investigation identified the operation of malware designed to access payment card data from cards used on point-of-sale devices at certain Hy-Vee fuel pumps, drive-thru coffee shops, and restaurants. Locations involved include Hy-Vee Pay at the Pump in Columbus, Fremont and Grand Island ranging from December 14, 2018 to July 29, 2019 along with the Hy-Vee Market Grill in Grand Island from January 15 to July 22, 2019 among other locations. Hy-Vee said in a news release there is no indication that other customer information was accessed.

Hy-Vee will be mailing victims a letter or sending them an email.