Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
SUPERVALU and Albertsons disclosed two separate 2014 intrusions involving payment-card processing systems. The first carried a possible exposure window of June 22 to July 17; a second, separate intrusion was announced in September and involved different malware, according to AB Acquisition. The companies said card data might have been captured, but their disclosures did not establish that it was stolen or misused.
What happened in the first intrusion?
On August 14, 2014, SUPERVALU announced that criminals had intruded into part of its network used to process payment-card transactions at some retail food stores and associated stand-alone liquor stores. The company said cards used at identified locations from June 22 through July 17 might have had data collected. Those dates were the company’s estimated exposure window, not proof that every transaction or card was captured.
SUPERVALU’s initial notice named 180 stores and liquor stores. Its October 2014 filing later described the first incident as potentially involving 209 SUPERVALU-owned and franchised stores and liquor stores. These are counts from disclosures made at different times, not a confirmed count of affected customers or stolen records.
The August notice identified the SUPERVALU banners Cub Foods, Farm Fresh, Hornbacher’s, Shop ’n Save, and Shoppers Food & Pharmacy. SUPERVALU said Save-A-Lot stores were not included in that notice. SUPERVALU’s August 14, 2014 notice and its October 2014 filing give the two dated counts and scope descriptions.
What AB Acquisition reported in August
AB Acquisition, which operated Albertsons-affiliated banners, reported a related-in-scope incident in a separate notice dated August 15. Its account listed Albertsons stores in Southern California, Idaho, Montana, North Dakota, Nevada, Oregon, Washington, Wyoming, and Southern Utah. It said Albertsons stores in Arizona, Arkansas, Colorado, Florida, Louisiana, New Mexico, and Texas, along with two Super Saver Foods stores in northern Utah, were not impacted.
The same notice listed ACME Markets in Pennsylvania, Maryland, Delaware, and New Jersey; Jewel-Osco stores in Iowa, Illinois, and Indiana; and Shaw’s and Star Markets in Maine, Massachusetts, Vermont, New Hampshire, and Rhode Island. This is AB Acquisition’s geographic account at that time; it should not be blended with SUPERVALU’s store count or treated as a single list of identical systems. See AB Acquisition’s August 15, 2014 notice.
#1 Best Overall
- 🔑Check Your Key Number: Before placing your order, it's essential to ensure you have the correct key number for your cash drawer. We want to make sure you receive the perfect fit.
- 🔢Key Number 050: Don't let confusion arise. This set is specifically designed for "Key Number 050" cash drawers. You can order with confidence knowing you're getting the right product. Customers are able to purchase different number keys (#001~024, 050).
- 🗝️4 Keys in Each Set: With this set, you'll receive four keys, designed to work seamlessly with both POS and PUSH HK Cash Drawers. It's a comprehensive solution for your security needs.
- Key and Lock (ASIN B07D5LJDQJ) Available 🔐Unique Key and Lock Options: Enhance your cash drawer security with our unique key and lock options, also available as ASIN B07D5LJDQJ.
How was the September intrusion different?
On September 29, 2014, SUPERVALU announced a second, separate intrusion that it believed had occurred in late August or early September. AB Acquisition said the new incident involved different malware from the earlier one. The later disclosure was not an extension of the first incident’s June–July exposure window.
SUPERVALU’s October filing said that, at that point in the investigation, the only SUPERVALU-owned or franchised stores where the second incident’s malware may have succeeded in capturing card data were four franchised Cub Foods stores in Minnesota. It estimated possible exposure at some checkout lanes from August 27 through September 21. Four is a store count, not a count of confirmed cardholders.
Rank #2
- 🔐Seamless Lock Replacement: Upgrade your existing cash drawer lock effortlessly with this kit. It's designed for compatibility and ease of use.
- 🏃Quick and Effortless Installation: We understand the value of your time. Our kit ensures a swift and straightforward installation process, so you can get back to running your business without delay
- 🗝️Unique Key and Lock Options (#001 ~ #024 and #050): Personalize your cash drawer security. Our kit offers unique key and lock combinations, providing an added layer of protection for your valuable assets.
- 🔑2 Keys Included: For your convenience, we include two keys with this kit, ensuring you always have a spare on hand
AB Acquisition separately listed banners and regions it believed affected by the second incident and again identified certain Albertsons regions and the two northern Utah Super Saver Foods stores as unaffected. Those September descriptions are distinct from its August account; neither notice establishes that every listed store had confirmed data theft. SUPERVALU’s September 29 announcement, the AB Acquisition September notice, and SUPERVALU’s October filing describe the later incident.
What payment-card data might have been exposed?
SUPERVALU said potentially collected information could include payment-card account numbers and, in some cases, expiration dates, other numerical information, and/or the cardholder’s name. The companies described possible collection or capture, not a verified set of records removed by attackers. SUPERVALU’s October filing said it had not determined that data potentially captured by either malware was in fact stolen. AB Acquisition likewise said it had not determined that card data was stolen; its August notice reported no evidence of misuse at that time.
The disclosures do not establish a confirmed total of stolen records or affected customers. Store counts and possible exposure periods cannot be converted into customer counts.
Rank #3
- CONTROL PORT ACCESS; Cover unused USB C ports to help stop unwanted cables, drives, chargers and peripherals from being connected. Simple physical access control with no software or configuration required.
- FOR IT & SECURITY; Built for access control providers, IT teams, facilities, schools, labs, kiosks, POS systems and shared workstations where unused USB C ports should remain unavailable.
- STANDARD USB C FIT; Designed for standard USB C ports on laptops, desktop PCs, tablets and smartphones. Low profile blockers sit close to the device. Recessed ports, tight cases and nonstandard housings may affect fit.
- 2 METAL KEYS; Includes two durable metal removal keys so authorized users can restore USB C access when needed. Keep one with IT, security or facilities and one as a backup.
- WIRELESS CHARGING; Ideal for phones and tablets that rarely need a wired connection. Keep the USB C port blocked until needed to avoid unknown charging cables or public USB connections and help reduce exposure to juice jacking.
What did the companies do in response?
SUPERVALU said it secured affected portions of its network, believed it had eradicated the malware, notified federal law enforcement and payment-card brands, and cooperated with investigations. Notices described 12 months of complimentary identity-protection services for potentially affected customers at the time. Those were historical offers; the notices do not establish that a similar service is available now.
In its August notice, Mark Bates, then Senior Vice President and Chief Information Officer at AB Acquisition LLC, said: “We know our customers are concerned about the security of their payment card data, and we work hard to protect it.”
Rank #4
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
What later disclosures said about security controls and assessments
Albertsons Companies’ 2018 filing reported that forensic reports found not all Payment Card Industry Data Security Standard (PCI DSS) requirements had been met at the time of the intrusions, and that some non-compliance may have contributed to or caused at least part of the compromise. The filing did not identify one specific control failure as the cause. This is a retrospective finding reported by the company, not a public release of the underlying forensic reports. See the 2018 Albertsons Companies filing.
The same filing reported payment-network assessments, not consumer losses or government fines. It said Mastercard asserted a final assessment of approximately $6.0 million, which Albertsons Companies paid in December 2016 and disputed in a lawsuit. It also reported a $1.0 million Visa assessment, paid in fiscal 2017.
Best Value
- 【Compatibility】 Cash drawer key compatible with M-S Cash Drawer Models with 010R, 010L, or 010 Locks. The 010 drawer key is compatible with many POS registers, cash drawers, and lockboxes with 010R or 010L locks. NOT Compatible with Locks that have only "010" on the face UNLESS it's an older M-S branded drawer.
- 【Cash Register Drawer Lock】010 key for drawers compatible with NCR 2176 and 2186 Drawer Models and Star Micronics SMD2-1214, SMD2-1317, & SMD2-1617 Drawer Models, also compatible with Panasonic Model JS-750CD Drawers
- 【Cash Drawer Key】NOT Compatible with "WT 010" Locks and does NOT replace round-head brass keys with "WT" on one side. Please note the hexagonal shape of the top of the key when comparing.If your original key has a square head, then this is probably not the correct key.
- 【Secured Cashier】The 010 key drawer can be used as a spare key for convenient storage and security, making it an ideal choice for businesses that require secure cash management.
- 【Material】010 key for cash drawer made of high-quality chrome plated material, it has good surface smoothness, oxidation resistance, and wear resistance, and is not easily corroded or rusted.
What the 2018 court account does—and does not—establish
A 2018 procedural account reported that the Eighth Circuit reversed dismissal as to one named plaintiff and affirmed it as to 15 others. It further said a later motion to dismiss the remaining plaintiff was granted with prejudice in March 2018, with an appeal pending as of that filing. That is a dated procedural snapshot, not a statement of the case’s current status. The court-opinion mirror recounts allegations and procedural history; allegations should not be treated as judicial findings. See the 2018 filing and the court-opinion mirror.
Was my card affected?
The public disclosures identify possible exposure windows and locations, not a roster of affected customers. If you used a card at a store during a relevant window, the notices do not show whether your specific transaction was captured. The historical notices’ 12-month protection offers do not establish present availability. For a current account concern, contact the card issuer using the number on the card or its official app, review transactions, and follow the issuer’s guidance on replacing a card or disputing an unfamiliar charge.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
