P2013-ND-41

On July 30, 2013, the Organization discovered that one of its web servers was sending out mass emails not authorized by the Organization. The server is located in Calgary, Alberta. A vulnerability in software used by the Organization to create marketing websites on the server was exploited. As a result, downloaded malware caused spam email to be sent from the server to email addresses unrelated to the Organization. The compromised web server contained the personal information of individuals who registered for a career expo with the Organization.