P2015-ND-59

An employee of the Organization was the subject of a social engineering attack (phishing). The employee?s email account was compromised. Contact information from the employee?s email account was then used by the attacker to send unsolicited and malicious emails to other employees of the Organization in an attempt to gain access to more information. The incident occurred between August 13 -17, 2015.