P2020-ND-035

On April 28, 2019, the Organization discovered that a call center employee had not followed mandated security procedures when handling customer payment card information. Upon notification from law enforcement that the employee had apparently misused the payment card information of other individuals, the Organization investigated. The investigation found that the employee had collected personal information from some Alberta residents between November 2, 2018 through April 24, 2019. The Organization found no information indicating that the former employee mishandled or misused the Alberta residents’ personal information. Out of an abundance of caution, the Organization decided to notify all customers whose payment card information had been handled by this former employee during employment at the Organization.