P2014-ND-56

Sometime between March 4, 2013 and March 9, 2013, an unknown individual(s) gained access to the Organization?s computer systems located in New York, NY USA. The breach was discovered on March 9, 2013, during a routine check of the Organization?s systems by the technology team. Within the database, credit card information was stored in an encrypted format. All other personal information was stored in clear text. The Organization could not confirm if the personal information was in fact accessed as a result of the intrusion; instead, the Organization reported there may have been unauthorized access to personal information on the server. There is no evidence to confirm whether or not actual customer profiles were accessed. The only evidence the company has is that the perimeter was hacked.