California state AG breach notification for Craftsman Book Company. A hacker exploited SQL injection vulnerabilities on construction-contract.net starting March 9, 2014, to access customer data (names, billing addresses, credit card numbers) on craftsman-book.com. Discovered May 27, 2014. No CVV or financial passwords were compromised. The company took the site offline, fixed vulnerabilities, and restricted access.