An incident in 2017 in which a third party gained unauthorised access to a subsidiary's online shop, creating the possibility that personal information, including credit card details, was obtained. A timing-dependent incident theme covering a change in the payment method and the potential occurrence of special investigation expenses and additional costs.