P2019-ND-096

An employee left his cell phone at a sporting event the evening of December 9, 2018. Although client information was not saved on the cell phone, email communication between clients and the employee would have been retained for what the Organization believes to be a period of less than 2 weeks. The Organization used its email archiving system to analyze the content of all emails sent to and from the employee’s email address for that period of time. Some email correspondence had attachments that contained sensitive client information; however, the Organization reported that in order to access information contained in these documents, they would have to be downloaded from the exchange server. The loss of the cell phone was discovered by its owner on December 10, 2018.