P2017-ND-035

The Organization operates a points rewards loyalty program known as PC Plus. On December 9, 2016, the Organization received several calls from PC Plus members concerning the disappearance of rewards points from their membership accounts. The Organization?s investigation confirmed member accounts had been targeted by threat actors operating in the Internet “dark web?. It appears fraudulent redemption of points began December 1, 2016. The Organization believes member accounts were accessed using usernames and/or passwords stolen from other sites.