P2017-ND-124

On June 23, 2017, the Organization became aware of a potential vulnerability in the security of its website. An investigation determined that malware infected the Organization?s website as early as April 2015. It appears to have resided in the website until the system was taken offline on June 23, 2017 and may have allowed outside parties to acquire payment-related information from customers who made credit purchases through the website.