P2021-ND-216

On September 8, 2020, the Organization was the subject of a ransomware attack. A user account, compromised by phishing, was used in the incident. It is reported that the attackers may have had access to the Organization’s network as early as August 13, 2020. The Organization’s investigation determined that personal information was exfiltrated, however, some of the records were protected with a password.