PENNSYLVANIA'S #1 WEEKLY NEWSPAPER • locally owned since 1854

Customers at area Rutter's locations might have been victims of data breach

Press & Journal Staff

editor@pressandjournal.com

717-944-4628
Posted 2/14/20

Rutter’s customers using a payment card at the Vine Street location in 2018 might have been victims of a data breach.

On its website Thursday, the company said it is “notifying our …

This item is available in full to subscribers.

Please log in to continue

Log in

Customers at area Rutter's locations might have been victims of data breach

Posted

Rutter’s customers using a payment card at the Vine Street location in 2018 might have been victims of a data breach.

On its website Thursday, the company said it is “notifying our customers of an incident involving payment cards that were used at some of our locations.” It’s possible 70 locations in Pennsylvania and one in West Virginia were compromised.

The website said the timeframe for any issues at the 2800 Vine St. location is Sept. 21, 2018, to Dec. 24, 2018. For the Hummelstown location, 8210 Derry St., it is Oct. 1, 2018 to May 29, 2019.

The company said it recently received a report from a third party suggesting there might have been unauthorized access to data from payment cards that were used at some Rutter’s locations. Rutter’s launched an investigation that included cybersecurity firms. Law enforcement was notified.

The payment card data was vulnerable on point-of-sale devices at some fuel pumps and inside some convenience stores through malware installed on the payment processing systems. That malware has been removed, Rutter’s said, and “enhanced security measures” are in place.

The malware searched for track data (which sometimes has the cardholder name in addition to card number, expiration date, and internal verification code) read from a payment card as it was being routed through the payment processing systems.

Payment card transactions at Rutter’s car washes, ATMs, and lottery machines in Rutter’s stores were not involved.

For customers Rutter’s can identify as having used their card at a location involved during a location’s specific timeframe and for whom Rutter’s has a mailing address or email address, Rutter’s will be mailing them a letter or sending them an email.

Call 888-271-9728 from 9 a.m. to 9 p.m. Monday through Friday with questions.