Sobeys admits to data breach in fall 2022, alerts customers

Months after a suspected cyberattack shutdown pharmacy services for a number of days, the Maritime company that owns Sobeys is alerting customers and employees past and present, about a data breach of personal information.

It was a cyber-security incident that made headlines across the country late last year. Although the company involved waited until now to confirm it.

The Maritime-based Empire Co. – parent company of Sobeys, acknowledges customers and employees past and present are receiving letters saying their personal information may have been compromised.

Bill Zebedee received his letter in the mailbox late last week from Medical Health Care Services Inc. (MHCSI). It is a company provides group benefits plans and works with pharmacies, including Sobeys and Lawtons.

Zebedee said when he first read the letter he was confused. “I was very surprised because I never heard of the company. I contacted them to confirm it was real,” he said.

The letters inform recipients that an unnamed third party gained access to Sobeys servers Nov. 1, 2022.

Experts say more letters may be sent out.

“This is one particular sub-company within the overall Empire Co. group of companies who may be affected so we may see different kinds of these letters arriving,” said cyber security expert, David Shipley.