P2017-ND-001

On September 21, 2015, the Organization learned that its computer network had been accessed by an unauthorized third party and ?one or more parties operating through foreign countries illegally accessed [the Organization?s] computer network and exfiltrated copies of orders??. Although the information at issue is primarily for corporate credit cards, it could also involve credit cards belonging to individuals.