P2019-ND-151

On July 28, 2017, the Organization was not able to access its file server. Later the same day, the Organization received an email saying that hackers had copied the Organization?s data and were demanding a ransom or the information would be released. The Organization disconnected the compromised server and contacted law enforcement. The file server contained mostly templates but did not contain client or employee data. The Organization reported ?The concern would be if they also hacked into any of the other computers on the same network as the file server, as one of them contains (encrypted) client credit card data, as well as client credit applications, and staff payroll information. To date, there is no evidence of this, and in fact the hackers believe they are hacking an entirely different company??.