BraceAbility, Inc. disclosed a security incident affecting its online ordering website. Between September 24, 2016, and November 28, 2016, credit and debit card data (including card numbers, verification codes, and expiration dates) of customers making online purchases may have been compromised. The company engaged forensic experts, corrected the vulnerability, and offered one year of free credit monitoring through Equifax.