NOTICE OF DATA SECURITY INCIDENT

Brookshire Grocery Company (“Brookshire”) is notifying impacted individuals of a data security incident that may have affected their personal information. Brookshire owns and operates grocery stores with gas stations in the state of Texas. Brookshire may have received your personal information if you purchased gasoline from them at their retail locations in Weatherford, Texas (between January 29 and February 16, 2023) or Joshua, Texas (between March 27 and April 13, 2023). Brookshire takes the privacy and security of the information in its control seriously and sincerely apologizes for any concern this may cause.

What happened?
Brookshire discovered unauthorized devices installed on two of its gas pumps, one in Weatherford, TX at store number #119, located at 601 Palo Pinto St, and one Joshua, TX at store #133, located at 1001 Joshua Station Blvd. Upon this discovery Brookshire removed the devices, implemented its incident response protocols, contacted law enforcement, and engaged outside experts to assist in its investigation. The investigation found that the unauthorized devices were credit card skimmers capable of reading and obtaining personal information contained on customer payment cards used to purchase gasoline. It was also determined that the devices were potentially in place on the Weatherford pump between January 29, 2023 and February 16, 2023, and potentially in place on the Joshua pump between March 27, 2023 and April 13, 2023. The investigation was unable to determine if any personal information was compromised. Potentially impacted information would include names, credit or debit card numbers, card expiration dates, and security codes.

We took steps to prevent a similar incident from happening in the future, including installing additional security cameras and additional measures to inspect and monitor pumping stations. We are also offering credit monitoring and identity protection services from Cyberscout through Identity Force, a Transunion company to impacted individuals at no cost.

Impacted individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank accounts and other financial statements, as well as credit reports, for suspicious activity. Incidents of suspected identity theft should be reported to law enforcement or the attorney general. We also encourage individuals to contact Cyberscout with any questions and to take full advantage of the Cyberscout service offering.

For more information:
Please call 1-833-770-0682 Monday through Friday from 8 am - 8 pm Eastern Time. We take very seriously the need to protect the privacy and security of all information in our respective care, and deeply regret any inconvenience or concern that this matter may cause.