P2013-ND-52

Between November 6 and November 8, 2013 an unauthorised third party gained access to certain computer systems located on a server. The access to the systems was gained through hacking. The purpose of the hack is unknown. The server was an asset from a company purchased by the Organization. It was located outside of the Organization?s secure environment, hosted by a third party service provider. Computer systems on the old server included an accounting program which contained unencrypted credit card information. The Organization is unable to determine if the credit cards were for personal use or corporate cards issued for company use.