P2013-ND-33

In March and April of 2013, several customers contacted the Organization to report that they experienced fraudulent charges on credit cards that had been used to make online purchases on the Organization?s website. The Organization hired forensic experts who confirmed that the Organization?s website was hacked and the personal information may have been accessed by the hacker(s). The forensic experts confirmed that credit card numbers and the corresponding expiry dates had been encrypted and were not stored in plain text.