MORE INFORMATION
HANNAFORD HOTLINE: (866) 591-4580
WHAT SHOULD YOU DO?
CUSTOMERS are not likely to be contacted by their financial institutions regarding the Hannaford breach. Trade associations are recommending that customers check their statements and contact their financial institutions immediately by phone if they spot any unusual activity. The state Attorney General's Office is recommending that anyone who thinks a card may be compromised simply cancel the card and request a new one.
BY THE NUMBERS
• Up to 4.2 million credit cards and debit cards were exposed to theft.
• Fraudulent activity has been reported on at least 1,800 cards.
• The security breach included 165 Hannaford stores in New England and New York and 106 Sweetbay stores in Florida.
• The breach lasted three months.
• At least two lawsuits against Hannaford have been filed on behalf of customers whose cards were exposed to fraud.
Unathorized charges have started piling up on credit cards and debit cards exposed to fraud during a security breach at Hannaford stores, according to investigators.
Authorities say thieves have used the cards in Southern states and along the East Coast, as well as in such far-flung locales as Bulgaria, Italy and Mexico.
The pattern, they said, suggests that whoever stole the data probably has sold the information to another tier of crooks.
The U.S. Secret Service is leading the probe. However, local police may end up investigating individual cases of credit card fraud, and overseas transactions will fall to authorities in those countries.
Ever since Hannaford Bros. announced Monday that 4.2 million credit card and debit card numbers and passwords had been stolen between Dec. 7 and March 10, authorities have concentrated on alerting consumers. The company said no personal identifying information such as names and addresses was stolen, but it urged residents to check their account statements for unfamiliar purchases and to contact their banks.
Portland police have had four cases of fraud reported this week in which cards regularly scanned at Hannaford were found to have been used for unauthorized purchases, said Sgt. Robert Martin of the property crimes division.
One customer reported a series of gas station and convenience store charges in Texas and Alabama, and another cited charges in Florida.
Two other cases involved unauthorized charges at national chains, but the location hadn't been determined. One of those was $1,200 at Best Buy.
The cases differ from the typical credit card theft that the department investigates, Martin said. In cases involving a credit card stolen from a purse or a car, the thief usually racks up large electronics charges at local stores within minutes – before the card is reported stolen.
Police scan security video at the stores and often can spot a familiar face.
When the information has been stolen on a massive scale and sold outside the state, there's little local police can do, he said. Police will forward the information to colleagues where the fraud occurred in hopes they will investigate, but it's a long shot.
The emphasis this week by attorneys general in states affected by the thefts – in the Northeast and Florida – has been to alert customers to the security breach and encourage them to contact their banks.
Sandi Copes, a spokeswoman for the Florida attorney general, said the state's consumer fraud division had received 16 complaints that appear linked to the theft of data from the Tampa-based Sweetbay Supermarket chain, owned by Hannaford's parent company.
One was a $1,500 charge in Italy that the credit card company blocked. Another was $1,270 spent in Bulgaria; that did go through, but the card company refunded the credit, Copes said. Charges at Bloomingdale's in New York City were thwarted by cancellation of a card.
Although the primary goal is protecting people's accounts, catching those who misuse the information remains important, too, Copes said.
Last year, Florida prosecutors working with the Gainsville Police Department broke up a gang that was using data stolen from Massachusetts-based retailer TJX Cos. to buy about $3 million in gift cards across the country. Members were sentenced last September.
Linda Conti, Maine's assistant attorney general in charge of the consumer protection division, said her office is not conducting a criminal investigation, but will track the case to make sure Hannaford has alerted customers and had reasonable safeguards protecting its electronic information.
Chris Pinkham, president of the Maine Association of Community Banks, said banks monitor credit card use for fraud, which might explain why there has not been a significant increase in fraud reports.
Customers have reported getting telephone calls and e-mails from...

Reader comments
Click here to view or add comments on this story
Were you interviewed for this story? If so, please fill out our accuracy form