Mall Services Group LLC (dba ChevyMall.com) disclosed a data security incident involving a third-party payment processing vendor. Malware was identified on the vendor's servers between September 18, 2020, and February 3, 2022, potentially capturing payment card information (numbers, expiration, CVV) and customer PII. The vendor engaged security experts, removed the malware, and notified law enforcement and card brands. No specific count of affected individuals was provided in the notification.