P2013-ND-45

On November 22, 2013, the Organization?s human resources officer reported to the Manager of Fleet/Security that an employee, prior to her termination, had forwarded 60 emails (unopened) from her business email account to her personal email account. In addition, personnel files of the terminated employee and her daughter (also an employee of the Organization) were missing. The terminated employee, who worked in the Organization?s payroll department, had authorized access. System audit logs confirmed that the employee had forwarded the business emails to her personal email account. Of the 60 emails, two included personal information of approximately 200 current and former employees of the Organization, in spreadsheet form.