P2016-ND-48

The Organization operates a consumer-facing website, which is hosted and managed by a third party website service provider. On March 11, 2015, the Organization learned from its service provider that it had experienced a cyber-attack and credit card information was compromised for orders processed between March 3 and March 11, 2015. The Organization took immediate steps to remove the malicious code that the hackers had inserted. The Organization’s service provider has been unable to
determine whether the general customer database was actually accessed, but could not rule out the possibility.