P2013-ND-42

The online sales system used to facilitate transactions on behalf of the Organization was hacked into exposing the above personal information. The Organization was contacted in April and May of 2013 by its credit card merchant and Amex Canada respectively advising that credit card holders that made purchases from one of the Organization?s websites had been compromised. An internal review of the third party?s system used to facilitate sales transactions was conducted and the system was scanned. No evidence of an intrusion on the third party?s server was found. The third party service provider, however, confirmed on July 12, 2013, that its system that contained the above personal information was hacked.