NPD acknowledged there had been a “security incident," saying a third party was “trying to hack into data” in December and that “potential leaks” popped up in April and August. The company said it conducted its own investigation into the incident and that “subsequent information has come to light," though it didn’t share what that information was.