P2017-ND-059

On May 15, 2015, the Organization was notified by a customer about suspicious credit card activity. The Organization investigated, and found that after a migration of the Organization?s website from one server to another, the Organization was hacked by a foreign entity. A forensic investigation revealed that malware had been active between March 26, 2015 and June 5, 2015. As a result, the Organization believes that its customers? personal information may have been accessed by an unauthorized third party during that time.