P2021-ND-138

On July 31, 2020, the Organization detected that data on a limited number of servers within its network environment was subject to a cybersecurity incident.
The Organization immediately launched an investigation and engaged a forensics firm to assist with its response. By August 2, 2020, the affected servers had been restored. On August 20, 2020, the investigation identified that personal information of a limited number of current and former employees had been acquired without authorization during the incident. The Organization immediately launched a comprehensive review of that data with outside e-discovery experts, which concluded in December 2020.