P2019-ND-072

The Organization operates the e-commerce store rennline.com. On January 18, 2019, the Organization discovered suspicious code on the website. An investigation determined that the unauthorized code was added by an unauthorized individual so that payment card information entered by purchasers on the e-commerce website was copied and sent to an unauthorized server. The code was active between May 28, 2018 and June 13, 2018, June 15, 2018 and July 12, 2018, July 20, 2018 and August 13, 2018, and August 22, 2018 and January 18, 2019. The incident was discovered on January 18, 2019, after the Organization was notified by its payment processor that cards that were used on the website showed signs of being used in fraudulent transactions.