P2020-ND-136

On January 30, 2020, an email was sent from a disused email account to an unknown number of people asking for a “favor” and for people to respond to the email. Most of the recipients are registrants of the Organization; some are vendors or other business contacts, some are staff members. The Organization?s IT technician quickly recovered the account and found that emails were being rerouted to a hotmail account. The hacker(s) had access to the account for approximately 10 ? 15 minutes. The breach was discovered on January 30, 2020 when staff members and the IT technician all received an email from the inactive account.