Some folks got emails / letter at least three days ago. The third party provider in question is the same secure file transfer provider that lead Kroger to notify it's employees of the breach throughout the past couple weeks.