P2018-ND-076

On March 22, 2018, the Organization learned that an unknown individual had gained access to an employee’s corporate email account and used the employee’s account to create and send spam emails. The Organization did not identify any evidence that emails stored in the employee’s account were viewed, but could not eliminate the possibility. The Organization identified unauthorized access to the email account between September 7, 2017 and March 22, 2018.