Summary
- Environment: Scan&Go ignica system
- Operational impact: Unauthorized access confirmed; data acquisition unconfirmed
- Financial impact: No confirmed incident cost quantified
- Record status: Developing record. Reviewed November 13, 2026; updated as evidence emerges.
What happened
United Super Markets Holdings confirmed unauthorized access to its Scan&Go ignica system. A file containing customer information was present, but actual external acquisition or leakage had not been confirmed. [1]
Impact
The potentially affected file contained names and email addresses for 64,003 accounts, not a verified count of unique people. Card details, addresses, telephone numbers and birth dates were excluded from that file. [1]
Timeline
Possible account-data exposure disclosed
The company notice distinguished confirmed access from possible leakage.
[1]Briefing updated
This briefing was last reviewed and updated on November 13, 2026.
Threat Group & Attack Vector
The notice does not establish an entry method, attacker identity or attack dates.
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific ATT&CK technique is mapped from the available evidence.
Response
U.S.M.H. took measures to prevent further access and continued investigating. It planned email and app-login notices for affected users and had not confirmed associated misuse or secondary harm. [1]