P2012-ND-09

The Organization held an online contest across Canada. The contest ran between October 11 and November 3, 2011. Contestants provided personal information in order to be eligible to win a prize as part of the contest. The personal information was stored in a database hosted by a third party service provider contracted by the Organization to forward coupons associated with the contest. On November 17, 2011, employees at the Organization who had set up email accounts for the purposes of testing the contest website received spam email that the Organization believes was sent by an organization, ?PT? based on the spam received. In addition, the Organiztaion reported that it received comments on its Facebook page from contestants who had also received the spam email.