Whole Foods hack may have exposed payment details
Amazon-owned grocery chain Whole Foods has warned customers who frequented one of its bars or restaurants recently to "closely monitor their payment card statements and report any unauthorised charges to the issuing bank" following a cyber attack. The company said the hack did not affect its main checkout lines as Amazon's payment system is separate from that used in its bars and restaurants. It is not clear how many outlets were affected and Whole Foods declined to provide figures on the potential number of customers at risk or which locations were affected, but said it was investigating the attack.

Shopping at Whole Foods might have cost customers more than just overpriced avocados.

The popular grocery chain, which Amazon bought for $13.7 billion in June, warned customers Thursday that thieves stole payment card information at several of its stores. The cyberattack hit Whole Foods' taprooms and restaurants, not stores' primary checkout lines, the company said.

These in-store taprooms and restaurants use a different payments system than the regular Whole Foods checkout. The hack didn't spread to Amazon's payment servers because they're not connected to Whole Foods' stores, the company said.

Point-of-sales attacks often target popular chains. Fast food joints like Chipotle and Wendy's have been hit in the past, with hackers stealing customer credit card information. Cybercriminals often look for easy targets to make quick cash, and restaurants have shown they're simple to hack.

Whole Foods has 449 stores in the US and more than 40 sell beer on tap. It's unclear how many restaurants Whole Foods has.

Watch this: How Amazon tech can be tied into Whole Foods 01:55

"While most Whole Foods Market stores do not have these taprooms and restaurants, Whole Foods Market encourages its customers to closely monitor their payment card statements and report any unauthorized charges to the issuing bank," the company said in a statement.

Whole Foods declined to comment on how many people are affected and which stores were hacked.

The grocery chain said it's working with a cybersecurity forensics firm and law enforcement to investigate who is behind the attack.

First published Sept. 29, 6:25 a.m. PT.

Update at 8:14 a.m. PT: With Whole Foods declining to comment.

It's Complicated: This is dating in the age of apps. Having fun yet?

Tech Enabled: CNET chronicles tech's role in providing new kinds of accessibility.