P2019-ND-137

A former employee, without authorization, electronically transferred funds from lines of credit, loans and/or members’ savings accounts to external bank accounts controlled by the employee and/or the employee’s family members. In addition to unauthorized access and use of personal information on the Organization?s information technology systems, four physical files relating to four individual members affected by the scheme cannot be located and are suspected to have been taken or destroyed by the employee. The breach was discovered on January 7, 2019, when a member contacted the Organization and inquired about a line of credit opened on her account without her knowledge. The Organization found that the line of credit was opened by the employee on March 9, 2018, and funds were drawn and deposited to an external account. Documentation for these transactions was missing. The incidents took place between March 10, 2011 and January 3, 2019.