P2019-ND-085

On May 31, 2018, the Organization became aware that an unauthorized third part(ies) gained access to the Organization?s system and installed one or more files that may have collected personal information from customers who made credit card purchases via the Organization?s website. The Organization reported that it has not discovered any evidence indicating that the affected information was downloaded or exfiltrated from the Organization?s network, but the Organization has been unable to definitively rule out any unauthorized acquisition of data. The incident occurred from September 19, 2017 to March 20, 2018.