UPS hacked: Malware breach at 51 stores in 24 states
UPS Store customers may have had their credit and debit card information exposed by a computer virus found on systems at 51 stores in 24 states. UPS says the information compromised includes names, card numbers and postal and email addresses from about 100,000 transactions between Jan. 20 and Aug. 11.
United Parcel Service driver Marty Thompson starts his truck up after making a delivery in Cumming, Ga. UPS has acknowledged a major malware breach affecting 51 of its retail stores in 24 states.
David Goldman/AP/File
Some customers of The UPS Store may have had their credit and debit card information exposed by a computer virus found on systems at 51 stores in 24 states.
A spokeswoman for UPS says the information includes names, card numbers and postal and email addresses from about 100,000 transactions between Jan. 20 and Aug. 11.
United Parcel Service Inc. said Wednesday that it was among U.S. retailers who got a Department of Homeland Security bulletin about the malware on July 31. The malware is not identified by current anti-virus software.
The company is not aware of any fraud related to the attack, spokeswoman Chelsea Lee said.
Atlanta-based UPS said it hired a security firm that found the virus in systems at about 1 percent of the company's 4,470 franchised locations. At many stores, the intrusion did not begin until March or April.
Lee said that the problem was fixed by Aug. 11 and the company took additional steps to protect systems at other stores. She said the affected stores were not linked electronically, and UPS is still investigating how they were compromised.
UPS said it is providing identity protection and credit monitoring help to affected customers.
The affected stores were in Arizona, California, Colorado, Connecticut, Florida, Georgia, Idaho, Illinois, Louisiana, Maryland, Nebraska, Nevada, New Jersey, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Dakota, Tennessee, Texas, Virginia and Washington.
From the company's description, the breach appeared far smaller than one that hit Target Corp. during the holiday-shopping season, when hackers stole credit and debit card information involving millions of customers. Fallout from the incident is still hurting profits. Target, which said Wednesday that second-quarter profit fell 62 percent, has spent $235 million related to the breach, partly offset by $90 million in insurance payments.
The UPS breach won't have a material financial impact on the company, Lee said.
Last week, Supervalu said that hackers might have stolen names, account numbers, expiration dates and other information from card holders who shopped at up to 200 of its grocery and liquor stores. Restaurant operator P.F. Chang's, Goodwill thrift stores and other retailers have been hit by data breaches.
A list of the affected UPS stores and the date range of the possible breaches
Arizona
10645 North Tatum Boulevard, Suite 200
Phoenix
85028
04.29.2014
08.11.2014
5402 East Lincoln Drive
Scottsdale
85253
01.26.2014
08.11.2014
500 North Estrella Parkway Suite #B2
Goodyear
85338
01.26.2014
08.11.2014
3800 West Starr Pass Boulevard
Tucson
85745
01.26.2014
08.11.2014
California
3419 East Chapman Drive
Orange
92869
04.29.2014
08.11.2014
25A Crescent Drive
Pleasant Hill
94523
04.29.2014
08.11.2014
1608 West Campbell Avenue
Campbell
95008-1535
07.01.2014
08.11.2014
3230 Arena Boulevard Suite 245
Sacramento
95834
04.29.2014
08.11.201
Colorado
3124 South Parker Road #A2
Aurora
80014
03.26.2014
08.11.2014
5910 South University Boulevard Suite C-18
Greenwood Village
80121-2879
04.29.2014
08.11.2014
12081 West Alameda Parkway
Lakewood
80228
04.29.2014
08.11.2014
Connecticut
35 East Main Street
Avon
06001
03.28.2014
08.11.2014
1131 Tolland Turnpike Suite O
Manchester
06042-1679
07.01.2014
08.11.2014
Florida
2910 Kerry Forest Parkway D4
Tallahassee
FL
32309
01.20.2014
08.11.2014
1400 Village Square Boulevard #3
Tallahassee
FL
32312-1231
01.20.2014
08.11.2014
Georgia
2700 Braselton Highway Suite #10
Dacula
30019-3207
04.29.2014
08.11.2014
1353 Riverstone Parkway Suite 120
Canton
30114-5622
04.29.2014
08.11.2014
1029 Peachtree Parkway North
Peachtree City
30269-4210
04.29.2014
08.11.2014
6361 Talokas Lane, Suite C140
Columbus
31909
01.26.2014
08.11.2014
Idaho
6700 North Linder Road Suite 156A
Meridian
ID
83642
04.29.2014
08.11.2014
Illinois
2033 North Milwaukee Avenue
Riverwoods
60015
07.01.2014
08.11.2014
276 East Deerpath Road
Lake Forest
60045
03.26.2014
08.11.2014
Louisiana
17732 Highland Road Suite G
Baton Rouge
70810-3813
04.29.2014
08.11.2014
Maryland
10816 Town Center Boulevard
Dunkirk
20754-3008
04.29.2014
08.11.2014
Nebraska
4089 South 84th Street
Omaha
NE
68127
07.01.2014
08.11.2014
Nevada
5575 Simmons Street Unit 1
North Las Vegas
89031
04.29.2014
08.11.2014
2657 Windmill Parkway
Henderson
89074
07.01.2014
08.11.2014
7435 South Eastern Avenue Suite 105
Las Vegas
89123
07.01.2014
08.11.2014
561 Keystone Avenue
Reno
89503
04.29.2014
08.11.2014
New Jersey
1385 Highway 35
Middletown
07748
04.29.2014
08.11.2014
1409 Marlton Pike Route 70 East, Suite 168
Cherry Hill
08034
04.29.2014
08.11.2014
201 Strykers Road, Suite 19
Lopatcong
08865
04.29.2014
08.11.2014
New York
420 South Riverside Avenue
Croton On Hudson
10520-3029
04.29.2014
08.11.2014
2520 Vestal Parkway East Suite 2
Vestal
13850
04.29.2014
08.11.2014
2316 Delaware Avenue
Buffalo
14216
04.29.2014
08.11.2014
North Carolina
6409 Fayeteville Road, Suite 120
Durham
27713
04.29.2014
08.11.2014
2217 Matthews Township Parkway, Suite D
Matthews
28105-4819
04.29.2014
08.11.2014
1639 US Highway 74A Bypass
Spindale
28160
07.01.2014
08.11.2014
217 Paragon Parkway
Clyde
28721
04.29.2014
08.11.2014
North Dakota
387 15th Street West
Dickinson
ND
58601
03.26.2014
08.11.2014
is below: