P2018-ND-143

On July 4, 2018, an employee of the Organization intended to send an email with three PDF attachments to the Compliance department to verify ATM deposits. Inadvertently, the email was sent to a non-employee, along with other staff members. The email was not encrypted or password protected. Attempts were made to recall the message through Outlook, but were not successful. The Organization made multiple attempts (through email, telephone and facebook) to contact the unintended recipient. The unintended recipient eventually did respond and advised that she does not use the email account any longer, and does not have access to it. The incident was discovered on July 5, 2018.