5 Million+ Debit, Credit Card data sale linked to Hy-Vee’s data breach earlier this year

We have known that a popular underground store which has data of credit and debit cards of users from different data breaches has just sold about 5 million of them. It is also reported that these cards were from cardholders of 35 U.S. states. This means that all of these credit and debit cards have now become vulnerable to hacks. However, the interesting part about this sale is that they seem to be from the Hy-Vee data breach back in August this year.

Hy-Vee reported that they are investigating a data breach on its supermarkets, gas stations as well as other drive-in restaurants and stores. Therefore, if you have ever done a credit or debit card transaction at any of Hy-Vee’s stores then it is better to change your cards right away. Because the data has been sold and the threat of a breach is extremely high. While Hy-Vee or the underground stores have not confirmed this report, KrebsOnSecurity says that multiple sources have reported this to them.

At that time, Hy-Vee said that it was too early to tell when the breach initially began or for how long intruders were inside their payment systems. However, these type of breaches in point-of-sale systems are present for a long time since malware is installed on the systems. Once detected, these systems have to be reset or replaced for the malware to be removed.