Business & Tech

BevMo Warns Customers Of Data Breach

BevMo advised of a malicious code designed to capture payment information entered on its website.

CONCORD, CA — BevMo, a Concord-based beverage retailer with stores in California, Arizona and Washington, has told 14,500 online customers that their personal information, including names, addresses and credit card numbers, may have been stolen, a spokeswoman said Thursday.

BevMo Chief Marketing and Information Officer Tamara Pattison said letters telling customers of the breach were mailed on Dec. 20.

The letter is posted on the California Attorney General's website. State law requires businesses to tell customers when their data has been stolen. When more than 500 customers are affected, a business must also inform the state attorney general.

Find out what's happening in Palm Desertfor free with the latest updates from Patch.

According to the letter, "an unauthorized individual was able to gain access to the BevMo website and install malicious code on our checkout page. This code was designed to capture payment information and may have affected certain orders placed on the BevMo website between August 2, 2018 and September 26, 2018."

BevMo stated that "the malicious code may have captured the following types of information entered by customers on the BevMo website between August 2, 2018 and September 26, 2018: name, credit or debit card number, expiration date, CVV2 code, billing address, shipping address and phone number."

Find out what's happening in Palm Desertfor free with the latest updates from Patch.

Pattison said in the letter that its website service provider, NCR Corp., has removed the malicious code. NCR Corp. and BevMo are each investigating and have been in contact with law enforcement, she said.

Pattison said people who buy beverages at the company's nearly 170 stores in three West Coast states were not affected. While BevMo sells beverages online, it makes most of its sales through the stores, she said.

"BevMo takes the privacy of our customers' personal information seriously and we deeply regret that this incident occurred," Pattison told customers in the letter.

Customers seeking more information about the incident can contact BevMo at 877-565-6276 between the hours of 9 a.m. and 9 p.m. Eastern time, Monday through Friday.

Bay City News Service contributed to this report.

Photo via Shutterstock

Get more local news delivered straight to your inbox. Sign up for free Patch newsletters and alerts.