Barbecue Renew Inc., an e-commerce retailer of grill accessories, disclosed a data breach affecting cardholder data (names, addresses, credit card numbers, CVVs) resulting from a cyber attack on its web server. The breach occurred between January 19, 2014, and November 12, 2014, involving multiple instances of exploitation of a web server vulnerability. The company engaged forensic investigators, law enforcement, and provided one year of complimentary identity theft protection services via Kroll to affected customers.