P2018-ND-162

On August 21, 2018, an unidentified party gained access to the email account of an employee of the Organization. Between August 21 and August 22 the unidentified party sent phishing emails to third parties, and likely ex-filtrated the contents of the employee?s email account. The Organization discovered the breach on August 22, 2018, when clients who had received the phishing email started to question if it was legitimate. The Organization said the suspected cause of the incident is a phishing email containing a malicious link that was received by the employee.