P2022-ND-065

The Organization was victim to a ransomware attack. Unauthorized activity was first detected on the Organization’s network on or about on August 10, 2021; on August 21, 2021, the Organization determined “this was a security issue.” An investigation determined that a “threat actor compromised an employee’s credentials to gain network access.” A February 16, 2022 update states: “Personal information appears to have been exfiltrated.”