Schnucks Did Not Break Law in Cyberattack, MO Attorney General Says

According to the St. Louis Business Journal, Missouri Attorney General Chris Koster’s office has determined Schnuck Markets Inc. did not violate Missouri law regarding data security in connection to the widespread security breach earlier this year.

(Read the complete St. Louis Business Journal article here.)

This conclusion is reportedly the result of an investigation by the AG's office after what Schnucks called a "cyberattack" that involved 79 stores and resulted in customers finding fraudulent charges on their debit and credit cards. The breach reportedly impacted 2.4 million cards.

As previously reported by Patch, Schnucks released a list of the stores hit by the security breach. The store at 15425 Manchester Road is on this list, among others in West County.

The following statement was included in the Business Journal article.

The St. Louis-based grocery chain “was itself a victim of criminal wrongdoing,”Nanci Gonder, press secretary for the attorney general, told the Business Journal. “After reviewing the records and speaking with forensic investigators, we did not find that Schnuck Markets violated Missouri laws regarding data security,” she said.

In May, Schnucks CEO Scott Schnuck also issued an apology on the matter on YouTube. However. many customers felt the chain did not inform the public of the breach quickly enough.

The Business Journal points out that Schnucks still faces six lawsuits related to the breach.