Data accessible on all Giant Eagle staffers due to employee portal issue

Share this article:

All employees with Pennsylvania-based supermarket chain Giant Eagle are being notified that, due to an issue, their personal information – including Social Security numbers – could have been accessed by anyone properly logged into the MyHRConnection Team Member portal.

How many victims? Undisclosed, but Giant Eagle employs more than 36,000 Team Members, according to the latest statistics on the website. 

What type of personal information? Names and Social Security numbers.

What happened? Due to an issue, employee data could have been accessed by anyone properly logged into the MyHRConnection Team Member portal.

What was the response? An investigation is ongoing. The problematic functionality in the MyHRConnection Team Member portal was disabled. All impacted individuals are being notified, and offered a free year of credit monitoring services.

Details: A Team Member notified Giant Eagle of the issue on May 24, and the problematic functionality was disabled on May 27. The incident impacts employees of Giant Eagle and employees of Giant Eagle-related employers or Giant Eagle independent retailers, for which Giant Eagle provided payroll services.

Quote: “It is also important to note that to date, we are not aware of any reports of identity fraud, theft or other harmful activity resulting from this issue,” according to a notification by Laura Karet, CEO of Giant Eagle.

Source: doj.nh.gov, “Re: Giant Eagle, Inc.,” June, 13 2014.

Share this article:

Sign up to our newsletters

POLL

More in The Data Breach Blog

Thousands had data on computers stolen from California medical office

Bay Area Pain Medical Associates notified about 2,780 patients that their data was on computers stolen from its California offices.

Subcontractor breach impacts 1,700 in Dominion Resources employee wellness plan

About 1,700 people in the Dominion Resources employee wellness program have been notified that their data was accessed in a breach.

Document posted to California city website, employee data accessed

In California, a document posted to the City of Encinitas website contained data on hundreds of current and former city staffers.