P2014-ND-54

On June 26, 2013, the Organization sold a computer with personal information of another customer on its hard drive. Computer was previously demonstration model on sales floor. The customer who purchased the computer returned it to the Organization on July 5, 2013, and that he had copied the date onto a USB flash drive in order to provide it to police. The Organization did a cursory review of the computer?s contents. The Organization investigated and found that its service depot failed to identify and properly wipe the secondary hard drive prior to returning the computer to the store for resale. The computer may have been on the sales floor as a demonstration model with the personal information on it before it was sold. The Organization deleted the information that was on the computer and cannot say with certainty what personal information was on the computer.