Sally Beauty Supply, one of the nation’s largest cosmetics retailers, is investigating a potential data breach, having already lost some 25,000 customers’ card data in a separate incident last March.
In a statement, the retailer said it was “investigating reports of unusual activity involving payment cards” used at some of its US stores.
“Since learning of these reports, we have been working with law enforcement and our credit card processor and have launched a comprehensive investigation with the help of a leading third-party forensics expert to aggressively gather facts while working to ensure our customers are protected. Until this investigation is completed, it is difficult to determine with certainty the scope or nature of any potential incident, but we will continue to work vigilantly to address any potential issues that may affect our customers.”
Sally Beauty has now confirmed the breach – the second it has suffered. In a statement published Thursday 14 May, Sally Beauty president and CEO Chris Brickman said:
“We believe it is in the best interests of our customers to alert them that we now have sufficient evidence to confirm that an illegal intrusion into our payment card systems has indeed occurred. However, we will not speculate on the scope of the intrusion as our forensics investigation is still underway,” said Chris Brickman, President and CEO. “We are working diligently to address the issue and to care for any customers who may have been affected by the incident.”
“Our customers are our top priority and we regret any frustration or inconvenience this illegal breach may cause them. I want to thank them for their patience and support as we continue to work hard to correct this issue,” said Mr. Brickman.
“We want to emphasize to our customers that, under the payment card brand rules, they will not be responsible for fraudulent charges to their accounts that are promptly reported, so we encourage our customers to monitor their payment card statements and report any suspicious transactions to their financial institutions. Customers who have any concerns regarding their payment cards should call our Customer Service Hotline by phone at 1-866-234-9442 or by email at email@example.com.”