The Web site’s credit card transaction system was accessed between mid-October and mid-November of 2013.