Graf & Sons has always been concerned about our customers safety and security. That is why we do not keep your credit card information with our website data or in our in-house database. It disappears from our records when you complete the e-commerce portion of your transaction.
Our website was recently the subject of a malicious code attack by unknown third parties. This was discovered on January 29, 2019 and security was restored within 1 day. As part of the research, it appears that this attack occurred on January 19, 2019. It appears that some customer files were affected and the malicious code captured certain credit card transactions from the e-commerce portion of the website. Customers that have possibly been affected have been notified by us. Because we do not retain credit card information, the attack was designed to capture the customer's first and last names, email address, mailing address and credit card information, including the credit card number, the expiration date, and the CVV code as the customer was entering their information.
We have implemented additional security measures designed to prevent a recurrence of such an incident and to protect the privacy of our valued customers and to prevent further unauthorized access. We are working closely with the applicable governmental officials to ensure the incident is properly addressed. We have reported this event to the FBI.
For more information regarding credit card security, please see the attachment.
Thank you,
Graf and Sons Team
