P2021-ND-159

On or about October 3, 2020, the Organization was informed that an account held with ?Mail Chimp? had been closed. The Organization learned that a former contractor had accessed the account without authorization, closed it without the Organization?s knowledge, and retained account information from Mail Chimp without the Organization?s knowledge or consent, on or about September 29 – October 3, 2020.
The Organization reported that there is no evidence that the Organization?s membership information was exported externally; however, it is possible that lists were viewed by the former contractor. The Organization reported that it is not aware of any use of these lists by the former contractor and not aware of any other activities (malicious or otherwise) undertaken by the former contractor.