P2017-ND-010

On August 18, 2016, an employee of the Organization began to receive ?Non Delivery Reports? for email(s) undeliverable to an unknown mailbox. After an internal investigation, the Organization discovered that a corporately owned webmail account assigned to an employee of the Organization was compromised such that all incoming email received through the account between July 17, 2016 and August 16, 2016 was automatically being forwarded to an unauthorized Gmail account.