Sally Beauty Holdings updated its customers May 28 about its ongoing investigation of the illegal intrusion into its payment-card systems as well as its efforts to provide support to customers who may have been affected by the incident.
As previously announced, Sally Beauty Holdings began an investigation into a possible security incident shortly after it received reports in late April of unusual activity involving payment cards used at some of its Sally Beauty Supply stores in the United States. Since then the company has been working diligently with the help of law enforcement and leading third-party forensics experts to seek to ensure that its customers are protected.
Sally Beauty Holdings is now confirming that criminals used malware believed to have been effectively deployed on some of its point-of-sale systems at varying times between March 6 and April 17. So the payment-card information of customers who used cards at affected Sally Beauty Supply stores in the United States during that time may have been put at risk.
In addition, Sally Beauty Holdings noted:
- Sally Beauty Supply does not collect nor store PIN data. Therefore, the company has no reason to believe—and has received no information to suggest—that debit card PINs may have been impacted.
- The company has eliminated this malware from all Sally Beauty Supply point-of-sale systems.
“We regret any inconvenience this incident may have caused our customers, and we want to reassure them that protecting our customers is our priority,” said Chris Brickman, Sally Beauty Holdings president and CEO. “Because we cannot pinpoint exactly which cards might have been affected during our reported date range, we are offering credit-monitoring services to any customer who used their payment card at a U.S. Sally Beauty store between March 6th and April 17th of 2015. Customers who wish to take advantage of these free identity-protection services can learn more through our website, sallybeautyholdings.com, or by contacting us at 1-866-234-9442 or customerserviceinquiry@sallybeauty.com.”
[Image courtesy of Sally Beauty Holdings]