State Officials Issue Consumer Protection Alert Following Data Breach Announcement by Shaw’s Parent Company

Press Release

GARDINER – Governor Paul R. LePage joined officials at Maine’s Department of Professional and Financial Regulation to reassure consumers that state and federal laws are in place to protect them from major losses due to file breaches containing debit and credit card information, such as the one disclosed August 14 by AB Acquisition LLC, which operates Shaw’s supermarkets in Maine and other states.

 

“Although it’s unknown whether consumers will be impacted by the data breach involving Shaw’s, the company indicates that stores in Maine were among those affected,” Governor LePage said. “I encourage people to closely monitor their credit and debit card statements, and to contact the financial institution that issued the card promptly if questionable charges appear.  Staff at Maine’s Department of Professional and Financial Regulation is also available to provide information and guidance.” 

The Bureau of Financial Institutions and Bureau of Consumer Credit Protection at the Department of Professional and Financial Regulation outlined the following information and guidance for consumers responding to news of a financial data breach:

• Consumers should always thoroughly review credit and debit card statements from the card issuer, and also review all other account statements from their bank or credit union.

• If consumers have online access to their credit or debit card information, they should review account activity as soon as possible, rather than waiting for the statement to arrive in the mail.

• If a credit or debit card was used at a business that has experienced a data security breach, or there is uncertainty about whether a card was used, consumers should be especially diligent in evaluating charges or withdrawals on their statement.

• Since the data breach involving Shaw’s reportedly began in June, consumers should review statements covering June to the present.

• If unknown charges or other suspicious activity appear on the account, consumers should notify the financial institution that issued the credit or debit card.

• Consumers do NOT need to contact the company that experienced the data breach, such as Shaw’s.

• Consumers’ liability for unauthorized use of a CREDIT CARD is limited to $50.  If account numbers have been stolen, consumers have no liability for unauthorized use.  
• Consumers noticing unauthorized activity on their DEBIT CARD resulting from a data breach have sixty (60) days from when the bank or credit union sent the statement to report it.  If consumers fail to notify the bank or credit union of unauthorized transactions within this time, they are liable for the amount of the unauthorized transactions. This 60 day timeframe applies ONLY when the card’s data has been compromised through a data breach, as in the Shaw’s case.  See below for details about when a DEBIT CARD has been lost or stolen.

• When a DEBIT CARD has been lost or stolen, consumers have two (2) business days after learning of the loss or theft to notify their financial institution in order to limit their liability to $50. If they do not notify their bank or credit union about the lost or stolen DEBIT CARD within two (2) business days, consumers may be liable for up to $500 of the unauthorized transactions. If consumers do not notify their financial institution within sixty (60) days after being provided a monthly statement that lists a fraudulent debit, they can be liable for unauthorized withdrawals of any amount that occur after that 60 day period.

• To be safe, DEBIT CARD holders should act immediately if they notice unauthorized withdrawals.

• If impacted by unauthorized charges or withdrawals, consumers should first call the bank or credit union that issued the credit or debit card, and then follow up in writing to explain the problem.

• Some banks and credit unions may issue new cards to customers whose credit or debit card numbers are known to have been compromised through a data breach.

• Consumer may ask a financial institution to re-issue a new card if they have concerns about their account.

• Again, consumers do NOT need to contact the business that was subject to the data breach; and they need to contact the bank or credit union that issued their credit or debit card ONLY if they notice suspicious activity on their statement.

• For more information, contact the Bureau of Financial Institutions toll-free at 1-800-965-5235, or the Bureau of Consumer Credit Protection is 1-800-332-8529.

###

More retailers pull formula after infant death | The Portland Press Herald / Maine Sunday Telegram

More retailers pull formula after infant death | The Portland Press Herald / Maine Sunday Telegram.
AP

COLUMBIA, Mo. — Several more national retailers have joined Wal-Mart Stores Inc. in pulling a batch of powdered infant formula from their shelves after a Missouri newborn who consumed it apparently died of a rare bacterial infection, the companies said today.

Officials at Supervalu Inc., Walgreen Co., Kroger Co. and Safeway said they have removed 12.5-ounce cans of Enfamil Newborn with the lot number ZP1K7G from various stores across the country as a precaution until federal health officials complete tests on the formula.

Ten-day-old Avery Cornett died Sunday after getting sick several days earlier in the southern Missouri town of Lebanon. Preliminary hospital tests indicated he died of a rare infection caused by bacteria known as Cronobacter sakazakii.

The source of the bacteria that caused the infection hasn’t been determined, but it can be found in dried milk and powdered formula as well as naturally in the environment and in plants such as wheat and rice.

“Out of an abundance of caution, we are removing the formula from certain stores,” SuperValu spokesman Mike Siemienas said today. “We will hold these products from sale until we receive additional guidance from regulatory authorities and the manufacturer.”

Retailers under the Supervalu corporate banner that pulled the product include Shaw’s, a New England grocer; Shop ‘n Save in St. Louis; Jewel-Osco in the Chicago area; Acme supermarkets in New Jersey and Philadelphia; Farm Fresh in Virginia; and some Albertson’s in southern California.

Kroger officials said they withdrew the formula from properties in Arizona, Indiana, New Mexico and the mid-Atlantic region. Kroger spokesman Keith Dailey said the company was able to remove most of the questionable batch from its warehouses and distribution centers before they were sent to retail outlets.

Officials with Walgreen Co. did not indicate how many stores are affected, or their locations, while the affected Safeway stores were primarily in the Chicago area, a company spokeswoman said.

Wal-Mart earlier this week announced its decision to pull the product from more than 3,000 stores nationwide. Avery’s parents bought their formula from a local Walmart in Lebanon, which is 160 miles southwest of St. Louis along Interstate 44.

A second infant in Missouri fell ill late last month after consuming several different types of powdered baby formula, but that child recovered, health officials said. The state health agency in Illinois, where the child lives, is investigating that case.

The Food and Drug Administration does not believe there is any connection between the two cases, spokeswoman Siobhan Delancey said.

The FDA, the Centers for Disease Control and the Missouri Department of Health are investigating the circumstances surrounding Avery’s death. Delancey said today that test results won’t be available until next week.

Investigators have collected samples of both liquid and powdered formula used by Avery’s family as well as unopened formula purchased at stores, including the Lebanon Walmart.

Formula manufacturer Mead Johnson Nutrition Co. said earlier this week that tests showed the batch was negative for the bacteria before it was shipped. A company spokesman did not respond to several requests for additional comment today.

The company told investors it plans to retest saved samples from the recalled batch, but the company did not undertake its own recall.

Wall Street investors reacted warily to the news, with shares of Mead Johnson falling a second straight day today amid investor concerns.

Enfamil statement