P2017-ND-067

On October 27, 2016, the Organization inadvertently emailed pay stubs of 17 employees of the subsidiary company to two current employees and two former employees. On the same day, one of the individuals who received the email notified a Supervisor with the subsidiary company of the incident. The subsidiary advised the Organization of the incident on October 28, 2016. The Organization requested the individual who sent the email to delete it, and contacted recipients of the email to request they delete the email without opening it. The Organization reported that all of the unauthorized recipients agreed to do so. The Organization determined that the cause of the breach was human error.