;

Investigation Continues Into Sub Shop Security Breach

A Letter to the Community:
Dear Oswego Sub Shop Patrons, Community Members, and Friends:
In November 2013, the Oswego Sub Shop was contacted by the United States Secret Service and identified as a possible common point of purchase of a credit card breach (hack).

They informed us that our computers may have been compromised resulting in the unauthorized use of customers credit card information.

We are currently working diligently, in full cooperation, with the United States Secret Service in finding the point of origin of this possible breach.

We have replaced all hard drives in our Point of Sale terminals and hired experts in PCI (Payment Card Industry) Compliance to ensure that our system is and will remain secure to the highest degree.

Information received thus far indicates that the possible compromise of this information may have been accomplished via an unauthorized EXTERNAL breach.

It is also important to understand that this is NOT an “internal investigation,” as it has been speculated in social media outlets, BUT RATHER a much larger investigation and scope.

According to Oswego Police Chief Tory DeCaire, “The management of the Oswego Sub Shop has fully cooperated in this investigation and, at this point, there is no reason to believe that the customers of the Oswego Sub Shop are at any greater risk than those at any other business that allows electronic transactions.”

We assure you that nothing was or is more important than keeping our customer’s payment card data secure.

We have taken this matter very seriously, and fully understand and apologize for any stress or inconvenience that it may have caused you and your family.

It is important to understand that this is an “ongoing investigation” and the local, regional and national law enforcement agencies are taking this situation very seriously, along with similar fraudulent activity reports seen recently at national retailers including Target, Neiman Marcus, Michaels and others.

We want to thank you for your patience, understanding and continued loyalty during this investigation.

Please do not hesitate to contact us personally with any questions regarding this matter.

Sincerely,
Bill and Kathy Greene,
Owners, Oswego Sub Shop

ORIGINAL NEWS ARTICLE BELOW:

OSWEGO, NY – On or about January 21, information was released to the public, attributed to the Oswego City Police Department, that the Oswego Sub Shop’s computers may have been compromised resulting in the unauthorized use of customers’ credit card information.

The possible compromise may have occurred several months prior.

As a point of clarification, information received thus far indicates that the possible compromise of this information may have been accomplished via an unauthorized external breach (hack).

Therefore, it was not a matter of an internal security breach.

The Oswego Sub Shop has been working diligently, in full cooperation with the United States Secret Service in finding the point of origin of this possible breach.

Since being notified of the possible compromise, the management of the Oswego Sub Shop has replaced all hard drives in their point of sale terminals and hired experts in PCI (Payment Card Industry) Compliance to ensure that their system is and will remain secure to the highest degree.

According to Oswego City Police Chief Tory L. DeCaire, “The management of the Oswego Sub Shop has fully cooperated in this investigation and, at this point, there is no reason to believe that the customers of the Oswego Sub Shop are at any greater risk than those at any other business that allows electronic transactions.”