Data Breach incidents

[1] TDSB student information breach

Canada's largest public school board, Toronto District School Board, reports information about some students may have been exposed in a recent cyberattack.

The Toronto District School Board said in June that an unauthorized party had gained access to its technology testing environment, which is separate and used to test programs before they run on the board's main computer system. The testing environment contained 2023/2024 student information that could include their name, school name, grade, TDSB email address, student number and birth day and month.

[2] Ransomware costs Southwestern Ontario hospitals millions

A ransomware attack that forced critical systems at five southwestern Ontario hospitals offline for weeks last year has cost those organizations upwards of $7.5 million. 

The October 23,2023 cyberattack compromised private records of hundreds of thousands of employees and patients when hackers gained access to the organizations' system. That attack forced people to postpone or reschedule surgeries and appointments at Windsor Regional Hospital, Erie Shores HealthCare, Hôtel-Dieu Grace Healthcare, Bluewater Health and Chatham-Kent Health Alliance. (The attack cost Windsor Regional Hospital a total of $3.8 million according to its annual financial statement.)

Hackers were able to pull social insurance numbers and patient visit information from some of the hospitals and post them online. 

[3] Park 'N Fly data breach hits 1M customers

The popular airport parking service Park’N Fly is warning Canadian customers that their personal information may have been compromised in a data breach last month.

“Approximately 1 million customer files were accessed” when “a third party accessed the Park’N Fly network through unauthorized remote VPN access,” the company said in a statement.

The leak happened between July 11 and July 13, and may have included names, email and mail addresses, and Aeroplan and CAA numbers, but did not contain financial information.