P2011-ND-029

The Organization entered into an agreement with an IT service provider to transfer information from a subsidiary organization?s Alaskan database into its main database. The service provider entered into a subcontract with another IT service provider, Microsoft Business Solutions (?Microsoft?), to assist with the database transfer. According to Microsoft, several hard drives, including a hard drive containing information from the Alaskan database, were reported missing from the work area in its secured facility in Fargo, North Dakota on July 26, 2011. Information on the hard drives was neither encrypted nor password protected at the time it was lost.