The breach occurred when Dollar Tree shared unencrypted personal information with Zeroed-In Technologies, which stored the data in an unencrypted, Internet-accessible environment. The exact methods used by the hackers and whether any malware was involved remain unclear.