P2017-ND-161

The Organization reported that a form on its previous website was hacked, allowing for a list of potential customer/client names, email addresses, and telephone numbers to be leaked and posted on another website (Pastebin). The Organization believes the incident occurred in December 2016. The incident was discovered on February 22, 2017, when the Organization received an email from a customer stating that the customer?s personal information had been posted to Pastebin. The Organization discovered that approximately 4,000 to 5,000 names, phone numbers and email addresses were hacked and posted on Pastebin.