P2019-ND-081

n December 21, 2018, during the course of conducting a cyber risk assessment of the Don Best network infrastructure prior to integrating that environment into the Organization?s network, the Organization discovered that, between October 12, 2018 and October 28, 2018, Don Best had been the subject of a malware attack that resulted in an unauthorized individual gaining access to a Don Best customer database. While the unauthorized user was able to view data, based on a forensic examination of the Don Best servers, the unauthorized user acquired usernames (e-mail addresses) and passwords to the accounts.