An Arizona-based supermarket chain says it's been victimized by a cyber attack on the stores' online systems, which provided criminals with access to customer payment information.
Bashas' officials said they recently located and removed a highly sophisticated piece of malware from its systems.
The FBI is investigating. Officials believe there could be hundreds of victims.
Customers are being warned to check their credit card and debit card transactions.
Pinal County Sheriff Paul Babeu says his office has fielded over 400 cases of credit card fraud in regards to this case. Bashas' spokesperson Kristy Jozwiak said the company learned about the malware less than a week ago, but Babeu said the company has known since June or July and has been working with authorities since September.
"We know that (Federal agents have) been working with (Bashas') as far back as September. So the fact that this is being put out that this is something brand new as of today I know for a fact that is false," said Babeu.
In a phone interview with CBS 5, Jozwiak said the Pinal County sheriff is incorrect.
"I can tell you with 100 percent confidence that Bashas', AJs or Food City did not know about this in June or July of last year. That's absolutely false," she said.
Bashas' officials said they've installed additional security measures to protect customers' personal information from attacks in the future.
In the meantime, PCSO has released a still image of three people that are wanted for questioning. Babeu said they were snapped using some of the stolen credit card information at another store.
The company operates Bashas' supermarkets, AJ's Fine Foods and Food City locations in Arizona and seven other states.
Bashas' full statement reads:
"We were recently the victim of a cyber attack by highly sophisticated criminals who gained access to parts of our systems to capture payment information. We are cooperating with federal law enforcement officials to undergo a thorough and exhaustive investigation.
"Bashas' is and has been compliant with all Payment Card Industry (PCI) security requirements. However, we recently located and removed a highly-sophisticated piece of malware that has never been seen before in the industry. The malware has been identified and contained, and we are working with forensic specialists and federal law enforcement officials in their investigation to find those responsible.
"We've also installed additional security measures (beyond what is required by the industry) to our point of sale and enterprise systems to further protect our customers' information from such attacks in the future.
"We have fielded some calls about this issue from customers in limited geographic locations. However, we are strongly encouraging all of our customers to closely monitor their debit and credit card transactions and to report any unusual activity.
"I just sent this new information to all of our stores letting them know that they need to post this update at every register. We sincerely apologize to our customers for any inconvenience this may cause, and if they have any additional questions, we ask that they contact our Customer Service Department at 480-883-6131."
Copyright 2013 CBS 5 (KPHO Broadcasting Corporation). All rights reserved. The Associated Press contributed to this report.
Wednesday, May 22 2013 10:45 PM EDT2013-05-23 02:45:38 GMT
The only things higher than the stakes in Las Vegas are the thrill rides. Now, the Rio All-Suite Hotel & Casino will be the latest to offer an attraction at dizzying heights. The hotel-casino on WednesdayMore >
The only things higher than the stakes in Las Vegas are the thrill rides. Now, the Rio All-Suite Hotel & Casino will be the latest to offer an attraction at dizzying heights. More >
Wednesday, May 22 2013 5:26 PM EDT2013-05-22 21:26:31 GMT
Authorities identified a 38-year-old pedestrian who was killed after being struck by a tractor trailer on U.S. 95. The Clark County Coroner's office said Penny Amber Franco died in the incident that tookMore >
Authorities identified a 38-year-old pedestrian who was killed after being struck by a tractor-trailer on U.S. 95.More >
Thursday, February 21 2013 3:40 PM EST2013-02-21 20:40:03 GMT
A woman arrested Tuesday was seen engaging in sexual acts with a pit bull while outside in a backyard and in view of neighbors, Las Vegas Metro police said. Metro Wednesday released the report describingMore >
A Las Vegas woman was arrested Tuesday after authorities caught her having sex with a pit bull in her back yard, according to Metro police.More >
Wednesday, May 22 2013 5:00 PM EDT2013-05-22 21:00:05 GMT
Las Vegas Metro police said former Major League slugger Jose Canseco is being investigated as a suspect in a sexual assault case. Metro made the announcement Wednesday following a series of tweets fromMore >
Las Vegas Metro police said former Major League slugger Jose Canseco is being investigated as a suspect in a sexual assault case.More >
Thursday, May 23 2013 1:17 AM EDT2013-05-23 05:17:27 GMT
Las Vegas prides itself being able to offer something for everyone who visits The Strip. To pull it off, it requires jobs with diverse skill sets, maybe even a little crazy.More >
Las Vegas prides itself being able to offer something for everyone who visits The Strip. To pull it off, it requires jobs with diverse skill sets, maybe even a little crazy. FOX5's Jon Castagnino attemptedMore >
Wednesday, May 22 2013 5:36 PM EDT2013-05-22 21:36:03 GMT
A 66-year-old inmate serving life in prison at a corrections center outside Las Vegas died Tuesday, officials said. According to the Nevada Department of Corrections, Leonardo Cruz was found dead in hisMore >
A 66-year-old inmate serving life in prison at a corrections center outside Las Vegas died Tuesday, officials said.More >