P2022-ND-080

On June 25, 2021, the Organization discovered that an unauthorized third party had gained access to its email account using a phishing email that harvested the user?s credentials. For a limited time, the third party was able to view emails that the account had sent. The forensic firm hired to investigate the incident did not identify evidence of data access or exfiltration within its network beyond any attachments included within the compromised email account.