Lokai Holdings is notifying customers who made purchases on mylokai.com between July 18, 2014 and October 28, 2014 that their payment card information (name, address, payment card number, expiration date, verification code, and the user name and password for customer accounts) may have been compromised.
You can read their template notification here.
The metadata for the breach that they submitted to the California Attorney General’s Office indicates that the breach occurred June 27.