P2017-ND-012

On or around November 29, 2016, the Organization?s investigation confirmed that an unidentified third party had injected malicious code into the Organization?s e-commerce website (pictureframes.com). The malicious code enabled the unidentified third party to acquire credit card information while purchases took place. The Organization?s investigation revealed that the access occurred between July 12, 2016 and November 30, 2016.