Hackers release corporate data stolen from London Drugs
Retailer London Drugs says cybercriminals who stole files from its corporate head office last month have released some of the data after it refused to pay a ransom.
Newly disclosed documents reveal the breach of an internal computer network at Rideau Hall was described to senior government officials as a "sophisticated cyber incident" in the days before the public was told of the security lapse.
Internal government emails, obtained by The Canadian Press through the Access to Information Act, also say officials were "unable to confirm the full extent of the information that was accessed."
As a result, the Office of the Secretary to the Governor General was looking to make credit monitoring services available to employees due to concerns that sensitive personal information might have been pilfered.
All managers were encouraged "to reflect on the information holdings they manage in their respective units" and raise any concerns they might have, says a Nov. 17, 2021, draft of a message that was to shared with Rideau Hall employees.
In a Dec. 2 news release, the Office of the Secretary to the Governor General said there was "an unauthorized access to its internal network" and that it was working on the investigation with the Canadian Centre for Cyber Security — a wing of the Communications Security Establishment, Canada's electronic spy service.
It mentioned efforts to improve computer networks as well as consultation with the federal privacy commissioner's office.
Ciara Trudeau, a spokeswoman for the Office of the Secretary, said it communicated with Rideau Hall employees and "external partners who may have been affected by the incident."
However, she declined to provide a general update on the breach, the sort of information accessed, or other details about how and why it took place.
Trudeau also would not discuss the provision of secure credit monitoring services to employees.
The internal emails indicate several senior Privy Council Office officials were advised of the breach two weeks before the event was made public.
Spokesmen for that office declined to comment on the incident.
Communications Security Establishment spokesman Evan Koronewski said the CSE and its cyber centre could not discuss specific details of the breach.
"What I can tell you is we continue to work diligently with (the Office of the Secretary to the Governor General) to ensure they have robust systems and tools in place to monitor, detect and investigate any potential new threats," he said.
The CSE is providing cyberdefensive services to the Office of the Secretary in co-ordination with partners at Shared Services Canada, he added.
Hacking into databanks has become increasingly attractive to cybercriminals, said Chantal Bernier, a former interim privacy commissioner of Canada.
"It is risk-free, very cheap and highly profitable," she said in an interview. "Sadly, there is also a lot of state-backed hacking."
Bernier lauded Rideau Hall for swiftly alerting the CSE, looking at credit monitoring for employees, and contacting the privacy commissioner's office even though the Office of the Secretary is not subject to the Privacy Act.
The case underscores the need to broaden the mandate of the commissioner in an era when the internet has created an imbalance of power between individuals and the organizations that possess their personal data, she said.
"It's now so complex. And we cannot, each of us individually, hold the organizations accountable — it's beyond us," said Bernier, who now handles privacy and cybersecurity cases at law firm Dentons.
"The magnitude of breaches and consequences is such that we need to have a regulator that is strong enough to hold all organizations that hold our data accountable."
This report by The Canadian Press was first published April 17, 2022.
Retailer London Drugs says cybercriminals who stole files from its corporate head office last month have released some of the data after it refused to pay a ransom.
A Toronto man who won $70 million in a recent Lotto Max draw literally fell off his chair when he saw the funds in his bank account.
Approximately 50 Montreal-area students — the vast majority of them female — were suspended Wednesday after their school deemed the shorts they were wearing were too short. On Thursday, several students staged a walk-out to protest what they believe is a "sexist" dress code that unfairly targets girls.
Something shifted in the pretty little village of Lumby, B.C., after Tatjana Stefanski vanished. It used to be the sort of place where parents let their kids roam free or play in the local creek, but everything has changed.
Celine Dion's fans are getting a first glimpse of the superstar's struggle with a rare neurological disorder in an emotional trailer for an upcoming documentary about her career and life.
An unlikely celebrity emerged from social media to cheer on the Edmonton Oilers as they face the Dallas Stars tonight in Game 1 of the Western Conference Finals.
American Airlines has distanced itself from a court filing in which the carrier said a nine-year-old girl should have noticed there was a camera taped to the seat of an airplane lavatory.
French luxury makeup and skincare brand Clarins is pulling out of Hudson's Bay stores in Canada.
The B.C. Supreme Court has ruled in the provincial government's favour on the City of Surrey's legal challenge to its ongoing transition to a municipal police force, according to B.C. Minister of Public Safety and Solicitor General Mike Farnworth.
The proprietors of Regina's sole discount theatre are aware they're carrying on a significant legacy.
When Jujhar Mann said he wanted to be a pastry chef on a grade school career project, he didn't imagine that pursuing his dream would land him on a popular Netflix baking competition.
A city known for its history, ties to outer space and southern barbecue, is also home to a Winnipeg chef dishing out dozens of perogies.
A Montreal photographer captured the moment a Canada goose defended itself from a fox at the Botanical Garden.
Public libraries in Atlantic Canada are now lending a broader range of items.
Flashes of purple darting across the sky mixed with the serenading sound of songs will be noticed more with spring in full force in Manitoba.
Catching 'em all with impressive speed, a 7-year-old boy from Windsor, Ont. who only started his competitive Pokémon journey seven months ago has already levelled up to compete at a world championship level.
A sanctuary dedicated to animals with disabilities is celebrating the third birthday of one of its most popular residents.
2b Theatre recently moved into the old Video Difference building, seeking to transform it into an artistic hub, meeting space, and temporary housing unit for visiting performers in Halifax.