Real Estate Business Services, Inc. (REBS) disclosed a data breach involving malware on store.car.org payment processing software between March 13, 2017, and May 15, 2017. The malware copied and transmitted customer personal information, including names, addresses, and credit card details (number, expiration, CVC). REBS removed the malware, switched to PayPal, and provided one year of credit monitoring via LifeLock. Law enforcement was notified.