P2019-ND-009

On October 22, 2018, the Organization discovered that an employee at its call center in Arizona had handled the payment card information of some customers in violation of the Organization?s security procedures. The Organization investigated and, on October 29, 2018, discovered a second call center employee had also improperly handled customer payment card information. The window of time in which one or both of these individuals worked at the call center was October 16, 2017 through October 29, 2018. The Organization found no information indicating that the employees had actually misused Alberta customers’ payment card information, but could not eliminate the possibility. The employee’s suspicious activity was discovered upon conducting a review of payment card handling practices. Visual surveillance showed the employees copying down customer payment card information.