According to a report by KCCI-TV in Des Moines, a Pennsylvania law firm today (Wednesday), has filed a class-action lawsuit against Hy-Vee in the wake of a recent data breach. Chimicles Schwartz Kriner & Donaldson-Smith LLP said the lawsuit represents customers whose personal information was compromised in a security breach of Hy-Vee’s gas pumps, drive-through coffee shops and Market Grilles, Market Grille Expresses and Wahlburgers locations between Dec. 14, 2018, and July 29, 2019.

The lawsuit accuses Hy-Vee of providing little information to customers following the breach and failing to “implement adequate data security measures.” It alleges that the breach was a result of Hy-Vee’s inadequate data security measures and cavalier approach to data security. The suit contends that despite the well-publicized and ever-growing threat of security breaches, Hy-Vee failed to ensure that it maintained adequate data security measures causing card information to be stolen.

Hy-Vee has not confirmed the number of cards that were compromised, but a data security expert listed in the lawsuit alleges that the credit and debit card information of more than 5 million customers are for sale on the dark web. The company has not commented on the pending litigation.