P2017-ND-071

On May 29, 2015, the Organization identified an unauthorized user in its computer system. Information in the Organization?s user database includes the user?s public profile that is publicly displayed on the Organization?s platform and non-profile information that is used for internal purposes. The attack was identified and terminated while the Organization was investigating the incident. The Organization determined that only a partial file containing user records may have been transmitted outside of the Organization?s systems.