CVS confirms that manager of its photo site was hacked in July, user info possibly stolen

CVS says investigators have confirmed that the company that manages their photo website was indeed hacked this summer, possibly resulting in the theft of some CVS customer information.

The nation's second-largest drugstore chain's photo website has been shut down since July after the breach was detected. The photo sites of Rite Aid, Costco and Wal-Mart Canada also were affected.

The Rite Aid and Wal-Mart Canada sites remain shut down, while the Costco site has restarted limited operations.

Staples Inc., the parent company of Canada-based PNI Digital Media, which manages all of the sites, says it appears that the hackers used malware to capture user information on PNI servers.

But it says that there's no sign that hackers accessed user photos or pin numbers.

CVS says it's contacting potentially affected customers.