Pepsi Bottling Ventures suffers data breach

The largest privately owned bottler of Pepsi-Cola products in the United States, Pepsi Bottling Ventures, claims a malware attack resulted in the stealing of personal data from its computers. The corporation began issuing notification letters to an undetermined number of people on February 10 to let them know that a month-long data breach may have exposed their personal information. Although the problem was only discovered on January 10, the research into it showed that the company’s network had been breached on December 23. On January 19, the unlawful access was stopped.

The company says in the notification letter, a copy of which was filed with the Montana Attorney General, that the attackers used malware while within the company’s network and downloaded data stored on the systems they had access to.

Examples of stolen personal information,

• Names
• Addresses
• Email addresses Financial information
• Social Security numbers
• License numbers Information from ID cards and passwords
• Benefits information
• Health insurance information
• Medical history
• Health and health insurance claims
• Digital signatures

A company-wide password reset request was sent to all employee accounts, according to the firm, as part of its efforts to limit the situation and enhance security.

Source

https://www.bleepingcomputer.com/news/security/pepsi-bottling-ventures-suffers-data-breach-after-malware-attack/

https://www.documentcloud.org/documents/23608389-consumer-notification-letter-820?responsive=1&title=1