The NOCO Company experienced a data breach involving unauthorized access to its website, noco.com, between October 8, 2019, and March 23, 2021. Malicious code permitted an unauthorized party to access customer payment card information, names, usernames, and passwords. The company engaged a cybersecurity firm, removed the code, reset passwords, and enhanced security controls. Notification letters were sent to affected customers on May 17, 2021.