Gingerbread Shed Corporation notified customers that an unauthorized third party accessed personal information between November 25, 2013, and February 17, 2014. The incident was discovered in approximately April 2014. Affected data included names, addresses, phone numbers, email addresses, credit card information, and website account usernames and passwords. The company engaged forensic investigators, notified law enforcement, and implemented additional security procedures.