P2018-ND-078

On June 1, 2018, PageUp, a third party, cloud-hosted system that the Organization uses for online recruitment, sent its customers a generic email advising that PageUp detected unauthorized activity in its system on or around May 23, 2018. The email provided all users with notice that an investigation was occurring but did not specifically indicate that any information relating to the Organization was accessed or otherwise compromised. On June 12, 2018, PageUp issued a statement that ?”We believe certain personal data relating to our clients, placement agencies, applicants, references, and our employees has been accessed.? The Organization reported ?The suspected cause of the breach (as stated by Page Up) is that malware initiated the intrusion? and that the unauthorized activity was detected by PageUp in their system on or around May 23, 2018, however ??the possibility that the intrusion occurred earlier remains??.