P2015-ND-16

During an office renovation, 57 boxes of paper records containing the personal information at issue were stored in an unlocked basement room between October 2014 and January 19, 2015. The incident was discovered during an annual compliance review of the Organization?s controls on January 16, 2015. The organization?s Chief Governance & Compliance Officer was notified of the incident on January 19, 2015. The unlocked room containing the information was accessible to 258 employees of the Organization and other entities operating within the same facility.