P2019-ND-064

On August 18, 2017, the Organization received a report regarding payment card activity that caused it to investigate and subsequently identify unauthorized computer code that was added to the code that operates the checkout page of the website at www.icsc.org. The Organization initially reported that the code may have been present and capable of capturing information entered during the checkout process from March 24, 2017 to August 18, 2017. Additional findings from the investigation indicate that the code may have also been present and capable of capturing information entered for a short period on August 21, 2017.