P2022-ND-049

In the early part of 2020, the affected individuals approached the Organization to assist them in obtaining a mortgage. The affected individuals did not ultimately require mortgage assistance. The Organization closed the file and copies of the information provided by the affected individuals was deleted. Due to an error, a copy of the affected individuals’ information was saved in a separate storage area of the Organization’s computer system under a different client name. On September 2, 2020, the affected individuals completed application form was sent to another client of the Organization. On December 1, 2020, the affected individuals advised the Organization that it had shared their confidential information with a third party without authorization. The Organization reported that its investigation took longer than initially anticipated but was completed in early March 2021.