P2018-ND-008

A personal financial statement containing the information at issue for one of the Organization?s members and his current partner was obtained by the member’s estranged spouse. The estranged spouse is also a member of the Organization. The Organization investigated and confirmed that a breach did occur. However, the Organization is unable to determine how or when the information was breached. The incident was discovered on December 22, 2015 by the member and his partner when the member’s solicitor emailed correspondence from the estranged spouse’s solicitor containing the financial statement as an attachment. The Organization was made aware of the incident on December 23, 2015, when an employee of the Organization received a call from the member?s current partner reporting the incident.