Ontario Science Centre

The names and email addresses of 174,000 Ontario Science Centre members, supporters, and others, including campers and birthday party attendees, were made public during a data breach in the summer.

Without permission, someone copied the names and email addresses of the science center's subscribers.

There was no further access to passwords, financial information, or personal identification.

Campaigner and the science center both reviewed their data security and retention procedures and notified Ontario Information and Privacy Commissioner Brian Beamish of the issue.

Source: https://www.thestar.com/news/city_hall/2019/10/28/ontario-science-centre-data-breach-exposed-174000-names-email-addresses.html

TPRM report: https://scoringcyber.rankiteo.com/company/ontario-science-centre

"id": "ont33623423",
"linkid": "ontario-science-centre",
"type": "Data Leak",
"date": "10/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 174000,
                        'industry': 'Education',
                        'location': 'Ontario, Canada',
                        'name': 'Ontario Science Centre',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Data Copying',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 174000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Names', 'Email Addresses']},
 'description': 'The names and email addresses of 174,000 Ontario Science '
                'Centre members, supporters, and others, including campers and '
                'birthday party attendees, were made public during a data '
                'breach in the summer.',
 'impact': {'data_compromised': ['Names', 'Email Addresses']},
 'motivation': 'Unknown',
 'regulatory_compliance': {'regulatory_notifications': ['Ontario Information '
                                                        'and Privacy '
                                                        'Commissioner Brian '
                                                        'Beamish']},
 'threat_actor': 'Unknown',
 'title': 'Ontario Science Centre Data Breach',
 'type': 'Data Breach'}