P2018-ND-064

On or around August 11, 2017, the Organization was advised that it had been identified as a common point of purchase for potential credit care fraud. The Organization?s forensic investigator determined that malware had been inserted into the Organization?s website that collected certain payment information used at the checkout. The Organization discovered that payment card information used by customers at its website was subject to unauthorized access from April 25, 2017 through August 29, 2017.