P2018-ND-140

The Organization reported that ?Employees responded to phishing email resulting in compromise of email accounts?. In its notification to affected individuals, the Organization said the incident ?occurred between October 4 and October 10, 2018. Unknowingly, 14 employees responded to a Phishing email scheme that resulted in a compromise of their email id and password. An unknown party, located in Egypt, had access and logged into these 14 employees [sic] email accounts and that access ranged from one day to five days. Our investigation determined that the unknown party did not copy email out of these email accounts, however, the unknown party did have view access [sic] these email accounts.? The breach was discovered on October 2, 2018 via suspicious login geography by the Organization?s Cyber Security team.