On November 9, Edion announced, in a follow-up to the unauthorized access to its e-commerce site disclosed on November 6, that an unauthorized program had been embedded in its payment processing, and that information including credit card numbers and security codes entered on the payment screen from a PC may have leaked to third parties in as many as 556 instances. It also announced that, in exceptional cases, up to five records containing card numbers and