United Parcel Service Inc., the biggest package-shipping company in the world, said customers personal and payment data has been exposed to risk due a computer security breach at some of its retail outlets in the period between January 20 and August 11 of this year.
“I understand this type of incident can be disruptive and cause frustration. I apologize for any anxiety this may have caused our customers,” Tim Davis, President of UPS Store said. “At the UPS Store the trust of our customers is of utmost importance.”
Malicious software (malware) was found at 51 locations in 24 states. The affected stores equal to about 1% of the total of 4470 franchise stores in the US. Chelsea Lee, spokeswoman of UPS Store, said the malware affected about 105000 transactions, but the company not yet specify exactly how many customers were actually affected.
The breach could have resulted in stealing credit or debit details of some customers, including names, postal addresses and e-mail addresses, and payment-card data.
The US-based delivery company started an investigation after a warning issued by the US Department for Homeland Security earlier in August. United Parcel Service Inc. explained that there was still no evidence that any details had been used for fraud, or even stolen. The company also shared that free identity protection and credit monitoring services are being provided to the affected customers.
Target, a major US retailer, reported Q2 earnings were hurt by a similar in nature, though far bigger security breach.
United Parcel Service Inc. was 0.54% up to close at $98.80 per share yesterday, marking a one-year change of +14.76% and valuing the company at $90.25bn. According to CNN Money, 21 analysts offering 12-month price forecasts for United Parcel Service Inc. have a median target of $110.00, with a high estimate of $120.00 and a low estimate of $99.00. The median estimate represents a +11.34% increase from the last price of $98.80.