An Arizona-based supermarket chain says it's been victimized by a cyber attack on the stores' online systems, which provided criminals with access to customer payment information.
Bashas' officials said they recently located and removed a highly sophisticated piece of malware from its systems.
The FBI is investigating. Officials believe there could be hundreds of victims.
Customers are being warned to check their credit card and debit card transactions.
Pinal County Sheriff Paul Babeu says his office has fielded over 400 cases of credit card fraud in regards to this case. Bashas' spokesperson Kristy Jozwiak said the company learned about the malware less than a week ago, but Babeu said the company has known since June or July and has been working with authorities since September.
"We know that (Federal agents have) been working with (Bashas') as far back as September. So the fact that this is being put out that this is something brand new as of today I know for a fact that is false," said Babeu.
In a phone interview with CBS 5, Jozwiak said the Pinal County sheriff is incorrect.
"I can tell you with 100 percent confidence that Bashas', AJs or Food City did not know about this in June or July of last year. That's absolutely false," she said.
Bashas' officials said they've installed additional security measures to protect customers' personal information from attacks in the future.
In the meantime, PCSO has released a still image of three people that are wanted for questioning. Babeu said they were snapped using some of the stolen credit card information at another store.
The company operates Bashas' supermarkets, AJ's Fine Foods and Food City locations in Arizona and seven other states.
Bashas' full statement reads:
"We were recently the victim of a cyber attack by highly sophisticated criminals who gained access to parts of our systems to capture payment information. We are cooperating with federal law enforcement officials to undergo a thorough and exhaustive investigation.
"Bashas' is and has been compliant with all Payment Card Industry (PCI) security requirements. However, we recently located and removed a highly-sophisticated piece of malware that has never been seen before in the industry. The malware has been identified and contained, and we are working with forensic specialists and federal law enforcement officials in their investigation to find those responsible.
"We've also installed additional security measures (beyond what is required by the industry) to our point of sale and enterprise systems to further protect our customers' information from such attacks in the future.
"We have fielded some calls about this issue from customers in limited geographic locations. However, we are strongly encouraging all of our customers to closely monitor their debit and credit card transactions and to report any unusual activity.
"I just sent this new information to all of our stores letting them know that they need to post this update at every register. We sincerely apologize to our customers for any inconvenience this may cause, and if they have any additional questions, we ask that they contact our Customer Service Department at 480-883-6131."
Copyright 2013 CBS 5 (KPHO Broadcasting Corporation). All rights reserved. The Associated Press contributed to this report.
Wednesday, May 22 2013 1:03 PM EDT2013-05-22 17:03:38 GMT
Tuesday afternoon proved a bit tricky as severe thunderstorm and tornado warnings were issued for portions of northern Connecticut, and according to the Channel 3 Early Warning Center, more storms areMore >
A severe thunderstorm watch has been issued for the four northern counties until 10 p.m.More >
Wednesday, May 22 2013 4:53 PM EDT2013-05-22 20:53:49 GMT
(RNN) - British officials are saying one man is dead and two others were injured in a possible terrorist attack in London on Wednesday.According to BBC News, eyewitnesses said man was attacked in a streetMore >
British officials are saying one man is dead and two others were injured in a possible terrorist attack in London on Wednesday.More >
Wednesday, May 22 2013 2:15 PM EDT2013-05-22 18:15:59 GMT
A Thomaston woman was arrested after police said cocaine was found in her 17-month-old son's system.Jaime Bennett, 31, said she brought her son to a local hospital after she noticed he wasn't acting likeMore >
A Thomaston woman was arrested after police said cocaine was found in her 17-month-old son's system.More >
Wednesday, May 22 2013 12:51 PM EDT2013-05-22 16:51:37 GMT
Officials with the Connecticut Citizens' Defense League announced Wednesday that a lawsuit has been filed in U.S. District Court in Connecticut that will challenge the constitutionality of the new gunMore >
Officials with the Connecticut Citizens' Defense League announced Wednesday that a lawsuit has been filed in U.S. District Court in Connecticut that will challenge the constitutionality of the new gun laws in the state.More >
Wednesday, May 22 2013 3:23 PM EDT2013-05-22 19:23:01 GMT
State police are searching for the person or people responsible who robbing a bank Wednesday afternoon and lead to officials placing a nearby school in lockdown.Officers were called to a bank robber atMore >
State police are searching for the person or people responsible for robbing a bank Wednesday afternoon, which led to officials placing a nearby school in lockdown.More >
Wednesday, May 22 2013 5:24 PM EDT2013-05-22 21:24:27 GMT
A water main break in Middletown is expected to cause the major traffic problems Wednesday night. A water main break was reported on Newfield Street, according to Mayor Dan Drew."The heavy water flowingMore >
A water main break in Middletown caused major traffic problems during the evening rush hour commute Wednesday night.More >
Wednesday, May 22 2013 3:59 PM EDT2013-05-22 19:59:54 GMT
A Cromwell man is accused of voyeurism after police said he posted an "intimate video" was posted to the Internet. Edward Taupier, 47, was arrested at his home Wednesday morning and charged with voyeurismMore >
A Cromwell man is accused of voyeurism after police said he posted an "intimate video" was posted to the internet.More >
Wednesday, May 22 2013 4:07 PM EDT2013-05-22 20:07:18 GMT
A Simsbury man was arrested after he was accused of being in possession of child pornography.Christopher S. Lyons, 49, was arrested Wednesday and charged with first-degree possession of child pornography.More >
A Simsbury man was arrested after he was accused of being in possession of child pornography.More >
Tuesday, May 21 2013 7:16 PM EDT2013-05-21 23:16:48 GMT
MOORE, OK - The Oklahoma County Sheriff's office tweeted a photo of a frightened, muddy dog Monday after the deadly EF-5 tornado ripped through the town.The comment accompanying the photo said, "scared,More >
A heartbreaking photo of a little dog guarding the body of his owner, who was killed in the Moore, OK, tornado, is going viral.More >