P2014-ND-12

Malware used to capture and download data stored on server. The Organization was notified of a potential issue by a merchant, who had been contacted by their processor. A forensics firm was hired and conducted an investigation. The investigation determined that an unauthorized intrusion had occurred. The attack was conducted utilizing sophisticated malware enabling the attackers to capture and download data stored on the Organization?s server. The attack occurred between November 25, 2013 and February 17, 2014. It was discovered in April 2014.