P2017-ND-156

Until July 2016, the Organization used a third-party vendor?s external system for secure storage services.In late July 2016, the Organization noticed suspicious activity in the system and commenced an investigation. The investigation found that a ?malicious computer intrusion had been mounted against the vendor?s system, involving exposure of data that had been placed in files in the storage solution?? and ?A small percentage of these files contained personal data.? The Organization reported it believes the intrusion took place during the month of July 2016.