CVS shut down the online photo service that it maintains [as of Friday, July 17th] as well as the mobile device service that is linked to the photo service [as a precaution]. Credit card information may have been stolen.
Payment information from the site is collected by PNI Digital Media of Canada (a third-party vendor)
CVS stated that the photo related information is kept separate from both the main CVS.com site and also payments and computer systems used by the company’s pharmacies. That means, according to the company, that payments through those locations, in addition to in-store kiosks, are not affected.