P2011-ND-008

The Organization uses an external payroll company to process its payroll. After noticing a number of irregularities (including the addition of unknown employees), the Organization’s accounting administrator contacted the external payroll company. The company confirmed their payroll system had been accessed using the authentication information of the accounting administrator to set up the unauthorized pay period and unknown employees. The external payroll company confirmed that the system was compromised by a remote source between 10:46 pm and 11:39 pm on March 14, 2011.