P2021-ND-188

On March 8, 2020, the Organization identified unusual activity on its websites rewardstyle.com and about.rewardstyle.com. The Organization investigated and found that an attacker had the ability to take over and redirect the website URLs but the investigation was inconclusive with respect to any access to the Organization?s information. The Organization reported that there was no unauthorized activity after March 8, 2020. On June 1, 2020, the Organization discovered that unauthorized individual(s) may have acquired certain personal data stored in its databases and had taken steps to make the data available for download to other third parties. On July 17, 2020, the Organization was able to obtain a copy of the data tables to verify that the data belonged to the Organization. The Organization believes that the information may have been taken on or about February 12, 2020.