Westlake Touchless Car Wash (Daly City, CA) notified the California AG on April 14, 2017, of a POS system intrusion occurring Feb 6-23, 2017. A third-party provider's system was infected with malware, exposing customer payment card numbers, names, and security codes. The company removed the malware, engaged monitoring, and offered one year of credit monitoring via Kroll. No specific count of affected individuals was provided; a substitute notice was issued due to lack of customer contact info.