P2021-ND-030

On August 12, 2019, an Excel spreadsheet containing certain personal information was inadvertently emailed to the Organization’s internal sales representatives distribution list. The list included mainly internal Organization email addresses; however, there were some external email addresses (for individuals within the Organization’s sales network). The breach was discovered on August 13, 2019 by the employee who sent the email. On August 13, 2019, an email was sent to those on the original distribution list advising them of the error and requesting they delete the email and, if they had forwarded it, requesting that they ask the recipient to delete the email. The Organization’s IT team also endeavoured to scrub the Organization’s network to remove the email from the recipients? inboxes.