DENTON, Texas — May 28, 2015
Sally Beauty Holdings, Inc. (the “Company”) updated its customers today on its ongoing investigation of the illegal intrusion into its payment card systems and efforts to provide support to customers who may have been affected by the incident.
As previously announced, the Company began an investigation into a possible security incident shortly after it received reports in late April of unusual activity involving payment cards used at some of its U.S. Sally Beauty stores. Since then, the Company has been working diligently with the help of law enforcement and leading third-party forensics experts to seek to ensure that its customers are protected.
The Company can now confirm criminals used malware believed to have been effectively deployed on some of its point-of-sale systems at varying times between March 6th and April 17th, 2015. Accordingly, the payment card information of customers that used cards at affected U.S. Sally Beauty stores during this time may have been put at risk. In addition:
- Sally Beauty does not collect or store PIN data. Therefore, the Company has no reason to believe, and has received no information to suggest, that debit card PINs may have been impacted
- The Company has eliminated this malware from all Sally Beauty point-of-sale systems
“We regret any inconvenience this incident may have caused our customers, and we want to reassure them that protecting our customers is our priority,” said Chris Brickman, President and CEO. “Because we cannot pinpoint exactly which cards might have been affected during our reported date range, we are offering credit monitoring services to any customer who used their payment card at a U.S. Sally Beauty store between March 6th and April 17th of 2015. Customers who wish to take advantage of these free identity protection services can learn more through our website, sallybeautyholdings.com, or by contacting us at 1-866-234-9442 or [email protected].”
SOURCE: SallyBeauty.com