Frequently Asked Questions

1. I saw a news item that says that certain information was potentially stolen from point of sale systems
from SUPERVALU stores. What happened?
SUPERVALU experienced a criminal intrusion into the portion of its computer network that processes
payment card transactions for some of its retail food stores, including some of its associated stand-alone
liquor stores. This criminal intrusion may have resulted in the theft of account numbers, and in some
cases also the expiration date, other numerical information and/or the cardholders name, from payment
cards used at some point of sale systems at some of the Companys owned and franchised stores. The
Company has not determined that any such cardholder data was in fact stolen by the intruder, and it has
no evidence of any misuse of any such data, but is making this announcement out of an abundance of
caution. Further details of the incident are available on our website www.supervalu.com, under the
Consumer Security Advisory section.

2. What specific information was disclosed about me?
Payment card number, and in some cases also the expiration date, other numerical information and/or
the cardholders name, from payment cards used at some point of sale systems at some of the
Companys owned and franchised stores were involved in the intrusion. The Company has not
determined that any such cardholder data was in fact stolen by the intruder, and it has no evidence of any
misuse of any such data.
3. Was my spouse or other family members information affected?
We do not believe that your spouse or family members information was at risk, unless they
independently made a card payment with their own payment card at one of the affected stores during the
period of the intrusion.
4. When did this incident occur? What stores were affected?
SUPERVALU believes that the payment cards from which such cardholder data may have been stolen
were used during the period of June 22 (at the earliest) through July 17 (at the latest), 2014, at the 180
SUPERVALU stores and stand-alone liquor stores listed at www.supervalu.com under the Consumer
Security Advisory section, which stores operate under the Cub Foods, Farm Fresh, Hornbachers, Shop
n Save, and Shoppers Food & Pharmacy banners. The intrusion may also have resulted in the theft of
such cardholder data from some cards used during this period at 29 franchised Cub Foods stores and
stand-alone liquor stores, which are included in the store list referenced on the SUPERVALU
website. SUPERVALU currently believes that the intrusion did not affect any of its owned or licensed
Save-A-Lot stores or any of the independent grocery stores supplied by SUPERVALU through its
Independent Business network other than the franchised Cub Foods store referenced above.


5. I am a customer of Albertsons. Where do I go for more information?
Although the intrusion also affected stores owned by Albertsons, Albertsons is a separate company
from SUPERVALU. To find out more information, please visit albertsons.com, acmemarkets.com,
jewelosco.com, or shaws.com.
6. I heard that some customers received an e-mail or letter regarding the incident. Will SUPERVALU
contact me directly?
We are sending out e-mail and paper mail notices to all customers who are active participants in our
stores customer loyalty program, My CUB Rewards, as we have contact information for these
customers. The content of these notices is the same as on our website www.supervalu.com under the
Consumer Security Advisory section. However, we do not have contact information for most of our
customers.
7. What steps are you taking to conduct your own investigation of the incident?
Upon recognition of the intrusion, the Company took immediate steps to secure the affected part of its
network. An investigation supported by third-party data forensics experts is on-going to understand the
nature and scope of the incident. SUPERVALU believes the intrusion has been contained and is
confident that its customers can safely use their credit and debit cards in its stores.
8. Has law enforcement been notified?
Yes, and an investigation is on-going.
9. Is it safe for customers to shop at SUPERVALU stores using their credit card or debit card number?
Yes, it is safe for customers to use their credit or debit cards in our stores. The intrusion on the system
has been contained.
10. How many customers information was potentially stolen in the intrusion?
Unfortunately, we do not know at this time.
11. Who is responsible for this attack? Who do you suspect?
Unfortunately, we do not know at this time.
12. Did the potentially stolen data contain any information about my phone number(s), my social security
number, or other information about me?
At this time, we have no evidence that any other information besides payment card numbers, and in
some cases also the expiration date, other numerical information and/or the cardholders name were
involved in the intrusion.
13. Do you suspect that my information was used fraudulently?
The Company has not determined that any cardholder data was in fact stolen by the intruder, and it has
no evidence of any misuse of any such data, but made this announcement out of an abundance of
caution. However, we urge you to be vigilant and closely review or monitor your bank and credit card
statements, credit reports, and other financial information for any evidence of identity theft or other
unusual activity. We also urge you to alert your issuing bank of any suspicious charges. You are not
responsible for counterfeit fraudulent charges on your credit card or debit card that are timely reported.
We also encourage you to take advantage of the complimentary identity protection services offered to
you by us through AllClear ID.
14. Should I close my credit card or other accounts?
You are not responsible for counterfeit fraudulent charges on your credit card or debit card that are
timely reported; accordingly, if you become aware of such activity, you should contact the issuing bank
immediately, and consult with your bank or card company regarding further action.
15. What is SUPERVALU offering its customers?
Although SUPERVALU has not determined that any cardholder data was in fact stolen by the intruder,
and it has no evidence of any misuse of any such data, the Company is offering customers whose
payment cards may have been affected 12 months of complimentary consumer identity protection
services through AllClear ID. SUPERVALU has established a call center to answer customer questions
about the intrusion and the identity protection services being offered. This call center will be staffed
Monday through Saturday from 8 am to 8 pm central time and can be reached at (855) 731-6018.
Customers can also visit www.supervalu.com under the Consumer Security Advisory section for
additional information about the intrusion and the complimentary consumer identity protection services
being offered through AllClear ID.
16. What can I do to protect myself?
Again, you are not responsible for counterfeit fraudulent charges on your credit card or debit card that
are timely reported; accordingly, if you become aware of such activity, you should contact your issuing
bank immediately.
We urge you to be vigilant and closely review or monitor your bank and credit card statements, credit
reports, and other financial information for any evidence of identity theft or other unusual activity. We
advise you to alert your issuing bank of any suspicious charges.
In addition, SUPERVALU is notifying the three major customer reporting agencies of the incident.
Under U.S. law, you are entitled to one free credit report annually from each of the three major credit
bureaus. To obtain a free credit report, you should visit www.annualcreditreport.com or call, toll free,
(877) 322-8228.
We also urge you to enroll in the free identity theft protection service that we are offering to you for 12
months as a precaution. To take advantage of these services, please call (855) 731-6018.
17. Who should I contact if I notice fraudulent activity on one of my accounts or I think my personal
information has been misused?
If you detect suspicious activity on any of your payment card accounts, report it to your issuing bank
immediately. You are not responsible for counterfeit fraudulent charges on your credit card or debit
card that are timely reported.
If you have reason to believe that your personal information is otherwise being misused, please report it
to your local law enforcement authorities and file a police report with your local Police Department and
notify the three national credit reporting agencies:
Equifax: 877-478-7625 or www.equifax.com
Experian: 888-397-3742 or www.experian.com
TransUnion: 800-680-7289 or www.transunion.com
If you believe that you have been the victim of not just fraud, but identity theft (i.e., someone has
impersonated you to establish an account or otherwise obtain goods or services), you should also file an
identity theft complaint with the FTC by calling 1-877-IDTHEFT (438-4338) or visiting
www.ftc.gov/idtheft/. Additional information on how to protect yourself can be found on the FTCs
website.
18. Will we receive any additional information or update?
Please visit our website for additional information and updates on this matter: www.supervalu.com
under the Consumer Security Advisory section.
19. Are there any additional resources that I can use to protect myself against fraud and identity theft?
You can request a free copy of your credit report once every 12 months from each of the three national
credit reporting agencies: Equifax, Experian and TransUnion.
These agencies also allow you to place a free fraud alert on your credit file, which is a consumer
statement added to your credit report. This statement alerts creditors of possible fraudulent activity
within your report as well as requests that they contact you prior to establishing any accounts in your
name. Once the fraud alert is added to your credit report, all creditors should contact you prior to
establishing any account in your name.
To place a fraud alert on your credit file, to request a free copy of your credit report, or to dispute
information appearing on your credit report, simply contact one of the following agencies:
Equifax: 877-478-7625 or www.equifax.com
Experian: 888-397-3742 or www.experian.com
TransUnion: 800-680-7289 or www.transunion.com
20. Where should I go for updates?
We encourage you to visit our website, www.supervalu.com under the Consumer Security Advisory section for
updates. You may also call us at (855) 731-6018.