P2018-ND-113

The Organization uses a third party service provider, Aptos, Inc., to provide a digital commerce platform that functions as the back-end for the Organization?s online stores. On August 24, 2017, Aptos notified the Organization that there had been a remote access intrusion that resulted in unauthorized access to online transaction data information provided by customers of the Organization. The Organization reported that, according to Aptos’ investigation, the intrusion began on approximately July 22, 2017 and ended on August 9, 2017. Aptos discovered indications of the intrusion in August 2017.