P2017-ND-034

One of the Organization?s service providers suffered a security compromise on its website, which in turn affected the online services available to the Organization?s customers. A forensic investigation revealed that malware had been active between June 19, 2014 and July 15, 2015. As a result, the Organization believes that its customers? personal information may have been accessed by an unauthorized third party during that time.