P2016-ND-31

On October 9, 2014, an authorized agent in Calgary noticed two transactions on its daily transaction list that were not processed by that agent. After reviewing additional transaction lists, the agent identified thirty-three (33) suspected fraudulent transactions. On October 19, 2014, the Organization identified an additional four (4) suspicious transactions that had been entered using a second agent’s credentials. The Organization reported that “fraudsters were able to access the two agents’ sign-on credentials” and as a result accessed the personal information of twenty individuals. This information was successfully used to process fraudulent transactions.