P2021-ND-028

On October 1, 2019, the Organization discovered that a staff member?s email account was compromised and messages received by this email account had been forwarded externally. The Organization’said that only incoming emails were affected by the email-forwarding rule. The breach occurred on or about September 17, 2019 to October 29, 2019.
The Organization reported that the documents involved did not include completed mortgage documentation and the information involved is publicly available through the land titles registries. The Organization discovered the incident when it received a scam email, directing it to deposit funds.