P2019-ND-046

On or about February 22, 2018, the Organizations noted their systems had been infected with ransomware essentially making them unavailable/inaccessible. Malicious actors had access to the Organizations? IT systems and data for about eight hours. All systems were backed up but the backup servers were also infected and there were no current off line backups. The mail server was not infected. However, the Organizations? mail database was hosted on a file server which was infected, so by the time the hacker got to the mail server, he or she had already disabled its ability to send email. The Receiver has been and remains unable to access the Organizations? IT systems or data, other than paper records and records kept on third party systems.