Schnucks is advising approximately 2.4 million customers who used credit or debit cards at its stores between December and March to check with their banks to make sure their accounts have not been compromised.
On Monday, Schnucks Markets Inc. reported that those who used their credit or debit card at 79 Schnucks stores in Illinois, Missouri, Iowa and Indiana between Dec. 10 and March 29 may have had their card numbers and expiration dates stolen. In that span, the Maryland Heights, Mo.-based grocery store chain received complaints from customers who reported hundreds to thousands of dollars taken from their accounts in transactions outside of the metro area and in some cases, outside of the country.
Schnucks spokeswoman Lori Willis said that the problem has been resolved as of March 30. However, customers who used credit or debit cards over the last four months may want to cancel their cards and get new ones.
"If you used your card between December and March and did not have your card canceled, then your card is potentially at risk," Willis said. "We don't have any way to know. We refer you to go back to your banking institution to talk through the issue with them."
On Monday, Schnucks also released a list of stores where credit and debit card holders whose accounts may have been compromised. The includes seven metro-east locations:
*2665 N. Illinois Street in Swansea
* 625 Lincoln Highway in Fairview Heights
*907 East Highway 50 in O'Fallon
*3100 Madison Ave. in Granite City
* 2811 Homer Adams Parkway in Alton
* 72 Airport Plaza in Bethalto
* 150 Waterloo Commons Drive in Waterloo
"Our information shows the stores and dates where and when they could have been taken," Willis said. "There is no way to know if they were taken or used fraudulently. Once we got our timeframe, from December to March, and narrowed that down, we were able to determine approximately 2.4 million cards that could have been affected."
The list did not include the six other metro-east Schnucks stores in Belleville at Country Club Plaza, East St. Louis, Cahokia, Collinsville or Edwardsville.
"If they are not on that list, we have no reason to believe that they are involved," Willis said.
On March 15, Schnucks first noticed that its card processor had detected potential fraud and immediately launched an investigation. Willis said the information that was compromised was cardholders' card numbers and expiration dates, but not their names.
Schnucks has shared its findings with the Secret Service and FBI. Willis said the company continues to work with law enforcement to find those responsible.
Schnucks has 100 stores in Missouri, Illinois, Iowa, Indiana and Wisconsin. Those stores where Schnucks believes customers' accounts may have been compromised included Missouri stores in Cape Girardeau, Columbia and Jefferson City, as well as the St. Louis area, and Illinois stores as far south as Carbondale and as far north as Rockford.
Customers at stores in Bettendorf, Iowa, and Evansville, Ind. were also potentially affected
If customers have additional questions or want further information about how to protect themselves against potential identity theft, Schnucks has created a call center: 1-888-414-8022. Through this weekend, the hotline is available 9 a.m. to 5 p.m. Monday through Friday, 9 a.m. - 5 p.m. and 9 a.m. to 4 p.m. Saturday and Sunday.
Contact reporter Will Buss at email@example.com or 239-2526.