P2017-ND-089

An employee of the Organization gave a bank account number and ATM card to the wrong member. The incident was discovered on December 2, 2016, when an employee noticed that the age of the member on the account did not match the age of the member completing a transaction. As a result of the incident, a number of unauthorized transactions were made on the affected account between November 9, 2016 and December 2, 2016. The affected member is deceased but has a joint account with his wife at the Organization. The unauthorized recipient of the account number and ATM card has the same first and last name as the deceased member.