"ICv2" reported that "one of two load-balanced servers was compromised, the company said, and it had no way of knowing which of the customers that had transactions during that period were processed on which server.