A device was stolen from Public Services and Procurement Canada.
PSPC is Infrastructure Canada’s service provider for pay, pension and benefits.
All 227 employees affected are at Infrastructure Canada.
The device in question was stolen on Aug 20 and affected employees were informed on Sept 7.
No banking or social insurance information was affected.
Name, person record identifier (PRI), date of birth, home address and salary range have been compromised.
Ottawa police have been made aware of the incident.
Source: https://globalnews.ca/news/4446600/federal-civil-servants-privacy-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/pspc-spac
"id": "pub2215251022",
"linkid": "pspc-spac",
"type": "Cyber Attack",
"date": "08/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Public Services',
'location': 'Canada',
'name': 'Infrastructure Canada',
'size': '227 employees affected',
'type': 'Government Agency'}],
'attack_vector': 'Physical Theft',
'data_breach': {'number_of_records_exposed': '227',
'personally_identifiable_information': ['Name',
'Person Record '
'Identifier (PRI)',
'Date of Birth',
'Home Address',
'Salary Range'],
'sensitivity_of_data': 'Medium',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2023-08-20',
'date_publicly_disclosed': '2023-09-07',
'description': 'A device was stolen from Public Services and Procurement '
'Canada, compromising personal information of 227 employees at '
'Infrastructure Canada.',
'impact': {'data_compromised': ['Name',
'Person Record Identifier (PRI)',
'Date of Birth',
'Home Address',
'Salary Range']},
'response': {'law_enforcement_notified': 'Ottawa Police'},
'title': 'Device Theft at Public Services and Procurement Canada',
'type': 'Data Breach'}