Schnucks Tightens Security After Cyber Attack

Schnuck Markets has “found and contained” the digital security breach that touched off reports of unauthorized access to payment card information at the St. Louis-based supermarket chain, and the retailer has taken comprehensive measures designed to block any further access.

Schnucks engaged a computer forensics firm that found evidence of computer code designed to capture the magnetic stripe data on the back of payment cards. With the breach identified and contained, the investigation now will turn to determining for how long the issue existed and which stores were affected.

“After an extensive review, we confirmed that Schnucks was the victim of a cyber attack,” said Scott Schnuck, chairman and CEO. “We have identified the issue and taken comprehensive measures to contain the incident.”

The company is cooperating with law enforcement officials, the Missouri attorney general’s office and the credit card companies to determine the scope and magnitude of the crime and apprehend the offenders. “We have been told by the computer forensics expert that the security enhancements we have implemented in the last 48 hours are designed to block this attack from continuing,” Schnuck said. “Our customers can continue using credit and debit cards at our stores. We apologize for any inconvenience this may have caused our customers, and we thank each of them for their patience while we worked hard to investigate their concerns.”

Schnucks launched the investigation after customers reported unauthorized charges on their credit cards, eventually traced back to the retailer. Thousands of credit card numbers may have been compromised, according to published reports.

Founded in St. Louis in 1939, Schnuck Markets Inc. operates 100 stores -- including five Logli and six Hilander stores -- and 96 in-store pharmacies in Missouri, Illinois, Indiana, Wisconsin and Iowa.