The International Code Council, Inc. (ICC), a non-profit organization, experienced a data security incident where unauthorized collection of payment card information entered by customers on its website occurred between June 30 and July 3, 2016. The company notified consumers around January 27, 2017, as indicated by a California Attorney General's filing. The ICC reported the incident to the California Attorney General on January 27, 2017, confirming the breach dates of April 25, 2016, and July 11, 2016, which likely refer to specific instances of compromise or discovery.
Confirmed data types include payment card information. The number of affected individuals and specific states beyond California remain unclear. It is unknown if SSN, medical, or other financial data was involved. The company's official breach notification statement has not been publicly found.
A class action lawsuit, Durov v. International Code Council, Inc., was filed on April 13, 2026, in the District Court, N.D. Illinois, alleging issues related to the data security incident. Details regarding an MDL status, public trading status, or revenue estimates are not available from the provided sources. Information can emerge over time, and consumer notifications may be delayed.