Canyon Bakehouse LLC notified customers of a data security incident in which unknown third parties gained unauthorized access to computer systems supporting the company's website and installed malware that compromised payment card information. Payment card data entered on the checkout page between March 29, 2017 and January 9, 2019 may have been obtained without authorization. Affected data includes customer names, payment card numbers, expiration dates, and CVV codes.