National retailer UrbanMart confirmed today that a point-of-sale malware infection compromised payment card data at 800 of its 1,200 locations between February 12 and April 3, 2026.
The malware, a variant of the Prilex POS family, captured magnetic stripe and chip transaction data in memory before encryption. An estimated 11 million payment cards may have been exposed, though UrbanMart emphasizes that online transactions were not affected.
The company has completed remediation at all locations and is working with Visa and Mastercard to notify affected cardholders. Customers who shopped at UrbanMart during the affected period should monitor their statements and consider requesting replacement cards.
