A Pennsylvania law firm announced Wednesday that it has filed a class-action lawsuit against Hy-Vee in the wake of a recent data breach.Chimicles Schwartz Kriner & Donaldson-Smith LLP said is representing customers whose personal information was compromised in a security breach of Hy-Vee's gas pumps, drive-through coffee shops and Market Grilles, Market Grille Expresses and Wahlburgers locations between Dec. 14, 2018, and July 29, 2019.The lawsuit accuses Hy-Vee of providing little information to customers following the breach and failing to "implement adequate data security measures."It alleges that the breach was a result of Hy-Vee's inadequate data security measures and cavalier approach to data security.The lawsuit goes on to say that, despite the well-publicized and ever-growing threat of security breaches, Hy-Vee failed to ensure that it maintained adequate data security measures causing card information to be stolen.Hy-Vee has not confirmed the number of cards that were compromised, but a data security expert listed in the lawsuit alleges that the credit and debit card information of more than 5 million customers are for sale on the dark web.Hy-Vee said in a statement to KCCI, "At this time we are not commenting on pending litigation."

A Pennsylvania law firm announced Wednesday that it has filed a class-action lawsuit against Hy-Vee in the wake of a recent data breach.

Chimicles Schwartz Kriner & Donaldson-Smith LLP said is representing customers whose personal information was compromised in a security breach of Hy-Vee's gas pumps, drive-through coffee shops and Market Grilles, Market Grille Expresses and Wahlburgers locations between Dec. 14, 2018, and July 29, 2019.


The lawsuit accuses Hy-Vee of providing little information to customers following the breach and

failing to "implement adequate data security measures."

It alleges that the breach was a result of Hy-Vee's inadequate data security measures and cavalier approach to data security.

The lawsuit goes on to say that, despite the well-publicized and ever-growing threat of security breaches, Hy-Vee failed to ensure that it maintained adequate data security measures causing card information to be stolen.

Hy-Vee has not confirmed the number of cards that were compromised, but a data security expert listed in the lawsuit alleges that the credit and debit card information of more than 5 million customers are for sale on the dark web.

Hy-Vee said in a statement to KCCI, "At this time we are not commenting on pending litigation."