July 17, 2015 – CVS Pharmacies shut down its online photo processing site today because it may have had a data breach. Visitors to CVSPhoto.com now receive a message stating that the site may have been breached. The company also shut down related mobile apps.
The CVS site’s payments are processed by an outside vendor that may have been the target of the breach. Although CVS has not named the vendor, PNI Digital Media stated on its website that it provides a digital platform to CVS. PNI, based out of British Columbia, Canada, provides similar services to a variety of online photo processing sites run by other vendors. Over the past few weeks, some of those other vendors have also reported potential data breaches.
PNI apparently took down the page mentioning CVS shortly after word of the data breach became public knowledge but a copy of the page can be found at krebsonsecurity.com. Krebsonsecurity has been responsible for announcing a number of high profile data breaches including the Target data breach two years ago.
In CVS announcement, the company has said that only CVS Photo was affected by the breach. CVS.com and the company’s retail store operations are not affected.
Anyone who believes that they may have been impacted in this breach can request additional information by calling 1-800-SHOP-CVS.
byJim Malmberg
Note: When posting a comment, please sign-in first if you want a response. If you are not registered, click here. Registration is easy and free.
Follow me on Twitter:
|