International Code Council experienced a data breach affecting customer payment card information (names, addresses, credit/debit card details) between April 25, 2016, and September 14, 2016. The incident was discovered on December 16, 2016, and has been contained. The organization engaged independent forensic investigators and implemented remedial measures including website/server security updates, additional firewalls, and security training.