P2015-ND-02

Between February 28, 2014 and April 10, 2014, an employee in the Organization?s Ontario office extracted customer data from the computer system. The employee disclosed the information to a former employee who works for an unauthorized and unaffiliated third party debt settlement agency. The incident was discovered by the Organization on April 4, 2014 when a customer contacted the Organization to ask why the customer?s account had been reassigned to another company. Between April 7 and April 10, 2014 the Organization discovered multiple accounts were involved.