One of the most popular grocery store chains in the northeastern United States has alerted customers that their information may have been vulnerable to hackers or other outside entities.
Wegmans locations stretch from New York and Massachusetts, all the way down to North Carolina. The market chain is known for its wide range of food selections and employee satisfaction.
According to officials, company databases that were used to store personal information like names, addresses, phone numbers, etc. were left unsecured. The company states that unknown configuration issues led to multiple cloud databases being left open to unauthorized access.
Wegmans was notified of the cybersecurity issue around April 19, 2021. They corrected the issue after determining the scope of the incident and information stored within the databases. The type of sensitive information that was impacted is as follows:
- Phone Numbers
- Birth Dates
- Shoppers Club Numbers
- Email Addresses
- Passwords for Wegmans.com accounts
All impacted Wegmans.com account passwords were “hashed” and “salted”, meaning the actual characters were not contained within the databases. Payment card or banking information was not affected. The company does not collect any social security numbers from shoppers.
It’s recommended that you change your password for your Wegmans.com account, as well as any other account which uses the affected password.
Even if you’re careful with your data, it doesn’t mean other companies who own your information are. It’s evident that cybersecurity risk is everywhere, and most people need to stay on top of risk management just to get by. Cyber attackers are always looking for cracks in critical infrastructure. For Wegmans to not keep on top of its cloud security is clumsy at worst, damaging at best.
Its extremely important for businesses and individuals to follow cybersecurity best practices in order to keep data safe from harm. If you’d like more information about what you can do to stay safe, you can leave us a message on our “Get in Touch” page or contact us at 585-582-1600.
Who’s Got Your Data?
Need an estimate? Request a quote below!