The City of Oceanside, California, experienced a data breach affecting customers who paid utility bills online between June 1, 2017, and August 15, 2017. Malicious code infiltrated a vendor-supported online payment system, exposing names, billing addresses, and credit card information (including security codes). The City shut down the compromised system, notified law enforcement, and engaged forensic experts. Affected individuals were advised to contact their credit card issuers and place fraud alerts.