P2018-ND-114

On December 11, 2017, the Organization received an extortion demand from an unknown person(s) claiming to have gained access to the personal information of the Organization?s customers. The Organization investigated and discovered there was an unauthorized access to certain of its servers that held personal information of Canadian customers who financed their vehicles with the Organization. The Organization also determined no payment card information was affected. The Organization determined that there is no indication of any external breach of its systems with respect to this incident which is being assessed as emanating from inside the Organization.