P2013-ND-23

The youth track and field event manager website is used to coordinate Organization sponsored events across Canada and the United States. The Organization website is hosted on a third party server. An unauthorized individual(s) accessed the third party server and deployed a malicious script. As a result of the malicious script, a website stored on the same server as the Organization website was defaced with a political statement on January 17, 2013. When the third party service provider restored the defaced website, the malicious script replaced all default web pages hosted on the server, including the Organization website, with the political statement. As a result, the Organization website was defaced with the political statement on January 19, 2013.