P2021-ND-114

On March 7, 2020, the Organization sent an email to customers, notifying them of a sales promotion. The Organization inadvertently “cc’d” customer email addresses instead of blind copying them (“bcc”). As a result, recipients were able to see other customers? email addresses and would know they are customers of the Organization. The incident was discovered the same day when one of the recipients reported the error to the Organization.