Project Management Institute (PMI) notified California AG that its vendor, Comnet Marketing Group, was breached April 23-24, 2016. An unauthorized user gained admin access and issued commands to delete data, potentially including customer credit card info (number, CVV, expiration). PMI hired Equifax for credit monitoring and terminated the vendor relationship. No evidence of data theft was found, but access could not be ruled out.