P2020-ND-113

On December 3, 2019, the Organization found its computer system was affected by a ransomware attack that caused its files to be encrypted. The attacker demanded a ransom.
The Organization reported its computer system risk management process includes backup systems and data, so the majority of the system and data were not subject to the attack. The Organization did not pay the ransom. Due to the nature of the attack and the short time between becoming aware of the attack and restoring its computer systems, the Organization cannot say with certainty that no digital files were downloaded by the third party from its server.