P2021-ND-237

The Organization operates an online consumer solutions portal called ?OCS?, which enables consumers to access their consumer disclosure. Each time a consumer wishes to access credit information through OCS, the consumer must provide sufficient personal information to match to their credit file and then authenticate their identity by successfully answer a series of questions generated from information on their credit file, as well as other sources. On October 22, 2020, the Organization noticed an unusually high number of both failed and successful attempts to access its OCS portal, occurring between mid-afternoon on October 21 to the morning of October 22. The Organization investigated and ascertained that some of the traffic may be by a malicious actor. The Organization believes that the unauthorized party had recent access to a large amount of up-to-date personal information obtained from an unknown third-party source.