P2019-ND-066

On December 20, 2018, the Organization was notified that an unauthorized individual was able to successfully access a member?s account and update information on the account. The breach occurred as a result of poor authentication practice, contrary to the Organization?s policy. The affected individual suffered a financial loss. The incident was discovered on December 21, 2018, when the Organization contacted the actual member to confirm an outgoing e-transfer.