The St. Louis-based grocery chain Schnucks Markets Inc. continues to face legal woes, four months after disclosing that up to 2.4 million credit and debit card numbers were exposed in a data breach initiated last December.
The chain's insurance company, Liberty Mutual Insurance Company, has filed a lawsuit against Schnucks, asking the court to free the company of any liability related to the breach, the St. Louis Post Dispatch reports.
The insurance company argues that it is responsible only for physical damages up to a certain amount, and not data breaches, the newspaper reports.
Schnucks did not provide an update to its legal situation on its website. Company spokeswoman Lori Willis did not respond to calls prior to deadline.
"The Liberty Mutual situation is disappointing, even surprising, as we never expected a lawsuit from our insurance company," Schnucks said in its prepared statement provided to the newspaper. "We bought a policy and they are attempting to walk away from their obligations under that policy. We were proactive in obtaining that policy and we expect them to honor their commitment."
Schnucks alerted its customers in April that a breach of debit and credit cards used in 79 of its 100 stores in five Midwestern states occurred over a period from December of 2012 to March 29, 2013. The store emphasized that only the card number and expiration date of the cards had been exposed and the hackers had no access to cardholder names, addresses or other personal information.
In the months immediately following the breach, a few customers filed individual lawsuits against the grocery chain, alongside as many as three class-action suits out of Illinois seeking several million dollars in damages. Generally, the suits claim Schnucks had inadequate security measures and failed to alert customers at the time of the breach.
The company has spent most of the summer attempting to get the lawsuits dismissed