P2022-ND-023

? On January 7, 2021, the Organization discovered that an external backup drive was missing from the server room of its head office in Edmonton, AB.
? The drive was one of several used to record daily backups of the Organization?s primary data server.
? The data server from which the backup drive was taken is located in a server room, which requires a keycode to access.
? The Organization discovered the encryption function on the scheduled daily backups of the server was disabled sometime prior to the incident.
? The Organization reported much of the information contained on the missing backup drive requires the use of third party software to be readable. However, as the data is not in an encrypted format, the Organization has assumed that all of the data on the missing drive has been compromised.