P2019-ND-048

In early and mid-December 2018, the Organization was notified by a few of its customers that their information had been accessed. On December 17, 2018, the Organization?s IT Consultant confirmed that it had discovered backdoors on the Organization?s website, www.tapestrymusic.com. The threat actors first gained access on September 15, 2017 by attacking plugins, which allowed access to the website and customer database.