P2021-ND-169

On August 3, 2020, the Organization discovered unusual network activity. The Organization?s investigation determined that an unauthorized party gained access to the network between August 3, 2020 and August 9, 2020. The Organization conducted a comprehensive review of all files involved, and determined on October 22, 2020, that they
contained personal information. The unauthorized party acquired copies of certain information pertaining to a limited number of individuals that was stored within the Organization?s systems. The Organization reported that it had no evidence that any information has or will be used, and that it arranged for the unauthorized party to delete the files that were removed from the network. The Organization does not believe there was any public disclosure of the files or information contained therein.