Cucamonga Valley Water District (CVWD) reported a security incident involving its online payment vendor, Click2Gov. Between August 26, 2019, and October 14, 2019, an unauthorized script was placed in the web payment portal code, potentially exposing customer names, billing addresses, and credit card information. CVWD and Click2Gov engaged forensic investigators and notified the FBI. No evidence of actual misuse was found at the time of notification. CVWD offered 12 months of credit monitoring to affected customers.