Vera Bradley is notifying customers its payment system was hacked, saying sales could be affected.
A notice posted October 12 on verabradley.com states on September 15, 2016, Vera Bradley was provided information from law enforcement regarding a potential data security issue related to its retail store network:
Upon learning this information, we immediately notified the payment card networks and initiated an investigation with the assistance of a leading computer security firm to aggressively gather facts and determine the scope of the issue.
Payment cards used at Vera Bradley retail store locations between July 25, 2016 and September 23, 2016 may have been affected. Not all cards used during this time frame were affected. Cards used on our website have not been affected.
Findings from the investigation show unauthorized access to Vera Bradley’s payment processing system and the installation of a program that looked for payment card data. The program was specifically designed to find track data in the magnetic stripe of a payment card that may contain the card number, cardholder name, expiration date, and internal verification code – as the data was being routed through the affected payment systems. There is no indication that other customer information was at risk.
It is always advisable to remain vigilant to the possibility of fraud by reviewing your payment card statements for any unauthorized activity. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card. Please see the section that follows this notice for additional steps you may take to protect your information.
Vera Bradley has stopped this incident, and we continue to work with the computer security firm to further strengthen the security of our systems to help prevent this from happening again.
Vera Bradley values the relationship we have with our customers and understands the importance of protecting personal information. We regret any inconvenience this may have caused. If you have questions, please call 844-723-9340 from 9:00 a.m. to 9:00 p.m. EDT, Monday to Friday.
Keep vigilant and monitor your accounts
The company urges customers to remain vigilant for incidents of fraud or identity theft by reviewing account statements, and free credit reports for any unauthorized activity.
You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting companies is as follows:
Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111
Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742
TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-916-8800
If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your state.
-Information courtesy VeraBradley.com