The Mortgage Bankers Association (MBA) suffered a data breach caused by malicious code injected into its online store website. The breach was discovered on January 7, 2021, but the unauthorized acquisition of customer payment card information occurred between August 4, 2020, and September 4, 2020. The incident impacted 771 individuals, including three Maine residents whose data was compromised. The breach involved the theft of financial details, specifically payment card data, which falls under sensitive customer information. While the exact method of exploitation (e.g., skimming, supply-chain attack) was not detailed, the injection of malicious code suggests a targeted cyber intrusion aimed at harvesting transactional data. The delayed detection (nearly five months after the breach period) raises concerns about the organization’s monitoring and response capabilities. The exposed data could lead to fraudulent transactions, identity theft, or financial losses for affected customers, though no immediate reports of misuse were mentioned in the disclosure.