P2021-ND-253

On March 12, 2021, several employees of the Organization were the target of an email phishing attack. Two employees provided passwords that would give access to their email accounts. The Organization reported the breach was discovered when employees found that providing their password did not allow them to login to their email account. On March 13, 2021, the Organization identified one unknown actor gained access to the email account to one of the two employees? email accounts. On March 16, 2021, the Organization discovered that there had been unauthorized access to an account, which occurred on March 13, 2021.