P2016-ND-43

On May 25, 2015 an unauthorized third party was able to access certain data elements on the Organization?s website via a previously unknown vulnerability. The Organization?s ongoing monitoring activities enabled the prompt identification and detection of the unauthorized activity on the same day (May 25). The Organization immediately commenced an investigation. The vulnerability was temporarily remediated within 2 hours of detection and within 5 hours of detection a permanent code fix was in place.