P2022-ND-038

? On January 25, 2021, the Organization discovered that it had been subject a phishing event and business email compromise.
? The Organization forensics team have been unable to confirm or rule out specific access to individual emails and therefore treated the entirety of the mailboxes as accessed by the unknown third-party actor.
? The Organization?s investigation was able to establish that the period of unauthorized access spanned from January 19, 2021 to February 3, 2021.