When Andy MacVane got a text message last month saying he had just made a purchase at the Hannaford in Scarborough, he thought it was credit card fraud — because he wasn’t at the supermarket.
So, he quickly drove to the Route 1 store to question the Visa transaction. MacVane, who lives in South Portland, said a manager there clarified that the text came from the Hannaford on Payne Road, and that it was a delayed posting of a purchase he made two months earlier in November.
“The manager said the checkout machine I used was broken at the time, so they were posting the purchase after the fact,” MacVane said. “He said other people had called to question similar charges.”
Hannaford spokesperson Ericka Dodge said MacVane’s credit card glitch likely had nothing to do with the “cybersecurity issue” that shut down the supermarket chain’s online systems for several days last November.
The incident left customers unable to order groceries through the company’s website or use credit cards at 189 stores across the Northeast.
“Based on the limited information available to us at this time, we believe this customer’s situation is unrelated to the incident we experienced in November,” Dodge said in an emailed statement to the Press Herald.
But MacVane’s experience raises questions about the wider exposure and awareness of other Hannaford customers in the wake of the November cyber incident, as well as the company’s lingering monthslong investigation that still hasn’t provided concrete answers about what happened or what was done about it.
Dodge said she was unable to discuss whether similar incidents had occurred with other customers, or provide a substantive update on the investigation into the cyber issue.
“The security of our customers is a top priority and our teams are continuing to work diligently with our external cybersecurity experts to assess the impact,” she said. “These investigations are incredibly complex and time consuming. We will share relevant updates as appropriate.”
Ahold Delhaize USA, Hannaford’s parent company, posted a statement Nov. 8 saying it had “recently detected a cybersecurity issue,” was investigating internally with cybersecurity experts and had notified law enforcement.
The company has repeatedly refused to say how dangerous the problem was and whether customer or employee information was compromised.
Hannaford has about 30,000 employees at stores across Maine, New Hampshire, Vermont, Massachusetts and New York, including 9,500 workers at 68 stores in Maine.
Dodge noted that Hannaford immediately took steps to assess and mitigate the cyber issue, including taking some systems offline to help protect them.
“These mitigation efforts temporarily impacted the availability of some services at Hannaford,” she said. “These services were restored, and our stores are open and serving our customers as usual. We apologize for any inconvenience this issue has caused.”
Dodge said Hannaford strives to provide positive customer experiences and would like to address any concerns that MacVane or others may have through the company’s customer care team.
“We very much value our relationship with our customers, and care deeply about ensuring the best experience possible for shoppers who visit our stores,” she said.
MacVane, a high school math teacher who lives in South Portland, said he’s glad he keeps a close eye on his finances, including the handy text alerts for credit card use.
He’s also satisfied with the way the store manager handled his concerns about the late posting of the Visa transaction for about $20.
“They ended up eating the payment,” he said.
Send questions/comments to the editors.
Join the Conversation
We believe it’s important to offer commenting on certain stories as a benefit to our readers. At its best, our comments sections can be a productive platform for readers to engage with our journalism, offer thoughts on coverage and issues, and drive conversation in a respectful, solutions-based way. It’s a form of open discourse that can be useful to our community, public officials, journalists and others. Read more...
We do not enable comments on everything — exceptions include most crime stories, and coverage involving personal tragedy or sensitive issues that invite personal attacks instead of thoughtful discussion.
For those stories that we do enable discussion, our system may hold up comments pending the approval of a moderator for several reasons, including possible violation of our guidelines. As the Maine Trust’s digital team reviews these comments, we ask for patience.
Comments are managed by our staff during regular business hours Monday through Friday and limited hours on Saturday and Sunday. Comments held for moderation outside of those hours may take longer to approve.
By joining the conversation, you are agreeing to our commenting policy and terms of use. More information is found on our FAQs.
You can modify your screen name here.
Show less
Join the Conversation
Please sign into your Press Herald account to participate in conversations below. If you do not have an account, you can register or subscribe. Questions? Please see our FAQs.