P2011-ND-042

On September 14, 2011, the Organization discovered that unknown person(s) illegally accessed the system of the outside vendor that hosts their website: DISCProfile.com. It was found that credit card transactions processed between May 8, 2011 and September 14, 2011 were subject to illegal interception.
In early September, 2011 (prior to September 14) three customers outside of Canada notified the Organization about fraudulent credit card transactions. After receiving these customer notifications, the Organization immediately engaged their website development firm to review the shopping cart on the DISCProfile.com website for fraudulent credit card transactions. On September 14, 2011, this website development firm notified the Organization and its outside vendor website host that this hack had occurred.