P2017-ND-005

On November 30, 2015, the Organization confirmed the presence of malware designed to target payment card data. The Organization’s investigation indicated potential unauthorized access to payment card information from cards used at certain managed locations or provided to a sales office between August 13, 2015 and December 8, 2015, as well as on or shortly after July 30, 2015 for a limited number of cards. On January 18, 2016 the Organization?s call center was contacted by an individual who reported 2 fraudulent payment card charges. The perpetrator(s) responsible for the incident have not been identified nor arrested.