‘Quickly evolving situation with many unknowns’: Oxford County responding to ‘technical incident’ relating to information systems

Investigation underway in the county after an incident involving municipality’s information systems. CTV London’s Bryan Bicknell reports.

Oxford County is saying little about an incident relating to its information systems.

The county has become the latest public body in the region that may be dealing with some type of cyber threat.

Although it has avoided the term ‘cyber-attack,’ the county has put the public on notice that it has discovered and is responding to an incident relating to its information systems.

Information technology expert Carmi Levy says he’s seen this scenario play out many times before.

“Woodstock, Stratford, Bluewater Health. All cyber-security incidents where somebody, usually an employee, received a message from a cyber-attacker, clicked on a link that they probably should not have, and that’s precipitated the attack, usually involving some sort of ransomware,” explained Levy.

Oxford County has declined an interview request from CTV News, referring instead to the following public statement from Warden Marcus Ryan:

Carmy Levy says the risk to Oxford ratepayers is real.

“That information is supposed to be secured, but it isn’t. It’s highly personal. Often contains financial details, health details, property details, you name it. And in the hands of a malevolent actor, a cyber criminal, a hacker, that information can be used in all sorts of ways. It can be used to launch customized identity theft attacks against ratepayers in future, it can be sold to other criminal groups as well,” he explained.

Oxford County says its response to the incident, including its investigation, is priority for the moment. It will provide updates on any new developments.