Event Rental Systems (ERS) disclosed that unauthorized code was inserted into customer website modules to scrape payment card data (card numbers, CVV, expiration dates) and contact information between October 2024 and October 2025. The company removed the code, engaged forensic investigators, notified law enforcement and card brands, and is offering one year of credit monitoring and identity restoration services via Experian to affected individuals.