Payment information stolen by a MageCart attack
https://www.bleepingcomputer.com/news/security/national-baseball-hall-of-fame-hit-by-payment-card-stealing-attack/
The web site for the National Baseball Hall of Fame in Cooperstown, NY was hacked to include a malicious MageCart script that stole the payment information of customers who purchased items on the site.
According to a notification filed with California's security breach notification service, the National Baseball Hall of Fame's web site had a malicious script injected into their online store between November 15, 2018 and May 14, 2019.