NewsLocal News


Hy-Vee facing lawsuit over data breach

Posted at 12:40 PM, Oct 16, 2019
and last updated 2019-10-16 17:34:41-04

KANSAS CITY, Mo. — Hy-Vee is facing a class-action lawsuit following a data breach that impacted some of its restaurants, fuel pumps and drive-thru coffee shops in the Kansas City metro and across the Midwest.

The lawsuit, filed Tuesday in the U.S. District Court for the Central District of Illinois, alleges the Iowa-based grocery chain did not share details about the breach in a timely manner and did not provide enough assistance to customers who were affected by the breach.

The suit also alleges the breach “was the inevitable result of Hy-Vee’s inadequate data security measures and cavalier approach to data security.”

In response to the lawsuit, Hy-Vee said it does "not comment on pending litigation."

Hy-Vee acknowledged in August that it had detected unauthorized activity on some of its payment processing systems linked to card payments. It does not believe the breach extended to payments inside grocery stores, drugstores or convenience stores.

The company operates more than 245 stores across the Midwest, according to its website.

More than two dozen locations in the Kansas City metro were impacted by the breach, according to Hy-Vee. To search for a location and see when it was impacted by the breach, click here.