What You Should Know
U-Save Foods, Inc./Price Rite Marketplace of Roslindale (“Price Rite Marketplace of Roslindale”) is writing to notify that potential unauthorized access to, and acquisition of personal information of Massachusetts residents may have occurred between December 17, 2022, and February 3, 2023.
Price Rite Marketplace of Roslindale takes this incident and the security of the information in its care seriously. Upon learning of the incident, Wakefern filed a police report, launched an extensive internal investigation, engaged leading cybersecurity experts to investigate. Price Rite Marketplace of Roslindale is also reviewing and updating our policies and procedures to better protect against similar incidents in the future.
Price Rite Marketplace of Roslindale encourages you to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and monitoring your free credit reports for suspicious activity or errors. Under United States law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus directly to request a free copy of your credit report at:
Equifax | Experian | Transunion |
P.O. Box 740256
Atlanta, GA 30374 |
P.O. Box 2002
Allen, TX 75013 |
P.O. Box 2000
Chester, PA 10916 |
1-800-525-6285 | 1-888-397-3742 | 1-800-680-7289 |
www.equifax.com | www.experian.com | www.transunion.com |
At no charge, you can also have these credit bureaus place a “fraud alert” on your file that alerts creditors to take additional steps to verify your identity prior to granting credit in your name. Note, however, that because it tells creditors to follow certain procedures to protect you, it may also delay your ability to obtain credit while the agency verifies your identity. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts on your file. Should you wish to place a fraud alert, or should you have any questions regarding your credit report, please contact any one of the credit reporting agencies.
You may also place a security freeze on your credit reports, free of charge. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit mortgages, employment, housing or other services. Under federal law, you cannot be charged to place, lift, or remove a security freeze. You must place your request with each of the three major credit reporting agencies. To place a security freeze on your credit report, you may send a written request by regular, certified, or overnight mail at the addresses below. You may also place a security freeze through each of the consumer reporting agencies’ websites or over the phone, using the following contact information.
Equifax | Experian | Transunion |
P.O. Box 105788
Atlanta, GA 30348 |
P.O. Box 9554
Allen, TX 75013 |
P.O. Box 160
Woodlyn, PA 19094 |
1-800-349-9960 | 1-888-397-3742 | 1-888-909-8872 |
www.equifax.com/personal/credit-report-services/credit-freeze/ | www.experian.com/freeze | www.transunion.com/credit-freeze |
In order to request a security freeze, you will need to provide the following information, depending on whether you do so online, by phone, or by mail:
- Your full name (including middle initial as well as Jr., Sr., II, III, etc.);
- Social Security Number;
- Date of birth;
- If you have moved in the past five (5) years, provide the addresses where you have lived over the prior five (5) years;
- Proof of current address, such as a current utility bill or telephone bill;
- A legible photocopy of a government issued identification card (state driver’s license or ID card, military identification, etc.);
- Social Security Card, pay stub, or W2; or
- If you are a victim of identity theft, include a copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft.
The credit reporting agencies have one (1) to three (3) business days after receiving your request to place a security freeze on your credit report, based upon the method of your request. The credit bureaus must also send written confirmation to you within five (5) business days and provide you with a unique personal identification number (PIN) or password (or both) that can be used by you to authorize the removal or lifting of the security freeze. It is important to maintain this PIN/password in a secure place, as you will need it to lift or remove the security freeze.
To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must make a request to each of the credit reporting agencies by mail, through their website, or by phone (using the contact information above). You must provide proper identification (including name, address, and social security number) and the PIN number or password provided to you when you placed the security freeze, as well as the identities of those entities or individuals you would like to receive your credit report. You may also temporarily lift a security freeze for a specified period of time rather than for a specific entity or individual, using the same contact information above. The credit bureaus have between one (1) hour (for requests made online) and three (3) business days (for request made by mail) after receiving your request to lift the security freeze for those identified entities or for the specified period of time.
To remove the security freeze, you must make a request to each of the credit reporting agencies by mail, through their website, or by phone (using the contact information above). You must provide proper identification (name, address, and social security number) and the PIN number or password provided to you when you placed the security freeze. The credit bureaus have between one (1) hour (for requests made online) and three (3) business days (for requests made by mail) after receiving your request to remove the security freeze.
You can further educate yourself regarding identity theft, security freezes, fraud alerts, and the steps you can take to protect yourself against identity theft and fraud by contacting the Federal Trade Commission or the Massachusetts Attorney General. The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission encourages those who discover that their information has been misused to file a complaint with them. Instances of known or suspected identity theft should be promptly reported to law enforcement, the Federal Trade Commission, and the Massachusetts Attorney General.
For more information, please contact Customer Care at 1-800-788-6634, Monday-Friday 9 a.m. to 5 p.m. EST.
What happened?
On February 3, 2023, U-Save Foods, Inc./Price Rite Marketplace in Roslindale, MA became aware of a skimming device on a sole register at the store during routine inspection. Upon learning of the skimmer, Price Rite Marketplace of Roslindale immediately shut down the impacted register, contacted the local police department and escalated the incident through internal company chains. The Boston Police Department opened an investigation into the incident, which is still ongoing. After reviewing CCTV footage, Price Rite Marketplace of Roslindale’s internal investigation determined that on December 17, 2022, three identified suspects entered the store, got in line for the impacted register, distracted the cashier at the impacted register and installed the skimming device on the pin pad. On February 2, 2023, two of the three suspects re-entered the store and both held a “wand” like device near the impacted register and exited. All of the mentioned CCTV footage has been provided to the Boston Police Department.
Boston Police permitted Price Rite Marketplace of Roslindale to keep the skimming device and perform independent forensic analysis on it. On March 3, 2023, Price Rite Marketplace of Roslindale engaged outside counsel and a forensic investigation team to determine the nature and scope of the incident. Unfortunately, due to the nature of the skimming device, the forensic investigators could not determine whether or not the skimmer successfully transmitted to the “wand” device seen on February 2, 2023. Therefore, out of an abundance of caution, U-Save Foods, Inc./Price Rite Marketplace of Roslindale pulled all transactions for the impacted register between December 17, 2022, and February 3, 2023. After reviewing all the transactions, the store determined 18 individuals may have been impacted by the incident. Potentially stolen personal information includes name, credit card number and debit card number.
What is a Skimmer Device?
A skimmer device is a card reader that is disguised to look like part of the pin pad. This is used by criminals to steal credit or debit card numbers to commit theft and fraud.
When did Price Rite Marketplace of Roslindale discover this?
The incident was discovered on February 3, 2023, during routine inspection.
How was the Skimmer Device detected?
The Skimmer Device was discovered during a routine inspection by Price Rite Marketplace of Roslindale store Management. Once detected, store personnel immediately shut down the impacted register, contacted necessary internal personnel, and called the Boston Police Department.
What information was impacted as a result of this incident?
This incident may have impacted 18 individuals, and the potential information accessed may include their name and credit/debit card number and pin number.
How do I know if I am one of the 18 people impacted?
The store has a list of names of the 18 people. If you think you may have been impacted, please call customer care at 1-800-788-6634, Monday-Friday 9 a.m. to 5 p.m. EST.
Does this mean someone stole my information?
Price Rite Marketplace of Roslindale does not have sufficient evidence to confirm if your information was accessed or acquired. The store has taken the precautionary measure of notifying you of this incident.
Is my financial information at risk?
If you are one of the 18 individuals whose financial information may have been impacted, your information may be at risk. Otherwise, your financial information is not at risk due to this incident.
What are you doing as a result of the incident?
Upon learning of the incident, U-Save Foods, Inc./Price Rite Marketplace of Roslindale filed a police report, launched an extensive internal investigation and engaged leading cybersecurity experts to investigate. The store is also reviewing and updating its policies and procedures to better protect against similar incidents in the future.
Have any customers experienced fraud or theft as a result of this incident? What steps can I take to protect myself?
We are not aware of any identity theft or fraud as a result of this incident. Nevertheless, we encourage you to:
- Monitor financial statements carefully.
- File your tax return as soon as possible.
- Monitor credit reports.
- Contact law enforcement to report suspicious activity related to identity theft and fraud.
- Contact the Federal Trade Commission or your state attorney general for additional information.
- Place a “fraud alert” or a “credit freeze” on your credit reports if you suspect unauthorized activity.
- Monitor for misuse of Social Security benefits.
Should I check my credit report?
As a general best practice, you should monitor your credit report. Every U.S. consumer over the age of 18 can receive one free credit report every 12 months by contacting one of the three national credit bureaus or through the Annual Credit Report Service by visiting annualcreditreport.com or calling toll-free, 1-877-322-8228.
There are fraudulent charges on my credit/debit card. What do I do?
If you have fraudulent charges on your payment card, you should immediately contact the issuing financial institution. Your financial institution will give you instructions on how to dispute the charges and have a new account issued to avoid further suspicious activity. Incidents of identity theft should also be reported to your local law enforcement.
I think I may be a victim of identity theft. What should I do?
If you believe you are a victim of attempted or actual identity theft or fraud, you are encouraged to take the following steps:
- Contact your financial institution to protect or close any accounts.
- Contact the credit reporting agencies to place a “fraud alert” or a “credit freeze” on your credit reports.
- File a police report with your local police department and ask for a copy for your records.
- File a complaint with the Federal Trade Commission.
- File a complaint with your state attorney general.
- Keep records and supporting documentation.
How often does the store check pin pads and other equipment for Skimmer Devices?
Price Rite Marketplace of Roslindale updated its security policies and procedures as it relates to checking pin pads and other equipment for Skimmer Devices. The store now checks the pin pads daily for any tampering or misuse and provides a log of the daily inspection to its Loss Prevention Department
What is Price Rite Marketplace of Roslindale doing to prevent this from happening again?
Although the company cannot guarantee this will not happen again, store personnel are checking pin pads daily and providing daily logs to Loss Prevention in an attempt to prevent any future skimming incidents.