P2019-ND-138

On January 30, 2019, the Organization concluded an investigation concerning suspected unauthorized access to an employee?s email account. The Organization reported the breach occurred on August 15, 2018 and ended on August 20, 2018, when steps were taken to secure the account. The Organization conducted a preliminary investigation at the time, but was unable to determine which emails or attachments may have been viewed in the account. The Organization recently began a new investigation with the assistance of a forensic firm. This investigation was also unable to determine which emails and attachments may have been viewed by the unauthorized person. Therefore, the University conducted a review of the full contents of the account and determined on February 22, 2019 that an email or an attachment that could have been viewed by the unauthorized person contained the name and medical information of one Alberta resident.