Freedom Smokes, Inc. (myfreedomsmokes.com) discovered that between approximately March 7 and April 25, 2017, an unauthorized individual accessed portions of their e-commerce website and inserted malicious code designed to capture payment card information (name, address, email, phone, card number, expiration date, CVV) entered during purchases. No SSNs were affected. The company engaged a cybersecurity forensics firm and notified affected customers.