Unauthorized software that was secretly installed on servers in Hannaford Bros. Co . ' s supermarkets across the Northeast and in Florida enabled the massive data breach that compromised up to 4.2 million credit and debit cards , the company said Friday .