P2021-ND-051

On February 26, 2019, a service provider advised the Organization that a former employee of the service provider improperly accessed and collected some of the service provider?s data and uploaded it onto a remote server. On March 15, 2019, the service provider advised the Organization that personal information of the Organization’s current and former employees and related individuals was amongst the client data that was stolen from its computer network. The service provider determined that a short term employee had surreptitiously and unlawfully downloaded data from the service provider?s network from January 28, 2019 to February 20, 2019. The individual has since been arrested and charged.