UPS – 51 retail stores breached by malware

August 20, 2014 – 8:32 PM

The UPS Store, Inc. recently received a government bulletin regarding a broad-based malware intrusion targeting retailers in the United States. The UPS Store takes seriously its responsibility to protect customer information and immediately launched an internal review, implemented system enhancements and engaged an IT security firm.

An assessment by The UPS Store and the IT security firm revealed the presence of this malware on computer systems at 51 locations in 24 states (about 1%) of 4,470 franchised center locations throughout the United States. Based on the current assessment, the earliest evidence of the presence of this malware at any location is January 20, 2014. For most The UPS Store locations, based on our current assessment, the period of exposure to this malware began after March 26, 2014. This malware was eliminated as of August 11, 2014 and customers can shop securely at The UPS Store.

We apologize for any inconvenience and impact this incident may have had on our customers. The UPS Store is offering identity protection and credit monitoring services to impacted customers.  In order to take advantage of this service, please visit https://theupsstore.allclearid.com.  In addition, customers are encouraged to closely monitor their card account activity and take other steps to help protect themselves outlined in the customer letter below.  The UPS Store representatives are available at 1-855-731-6016 for additional assistance.

The impacted center locations, along with the timeframe for potential exposure to this malware at each location, follows this statement.

Source:
http://www.theupsstore.com/security/Pages/default.aspx