The Resort Municipality of Whistler (RMOW) informed members of the public that its municipal website, Whistler.ca, was subject to a recent security breach.
It was found that the purpose of the attack was to re-direct people to different and, most likely, illicit websites.
Immediate action was taken to identify, contain and resolve the issue. staff became aware that personal information collected through forms on the website may also have been vulnerable. The action was quickly taken to remove the web forms and any associated personal information from the site.
Source: https://www.databreaches.net/ca-rmow-says-municipal-website-subject-to-security-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/rmowhistler
"id": "res16412223",
"linkid": "rmowhistler",
"type": "Breach",
"date": "01/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Municipal Services',
'location': 'Whistler, Canada',
'name': 'Resort Municipality of Whistler',
'type': 'Government'}],
'attack_vector': 'Website Compromise',
'data_breach': {'type_of_data_compromised': ['Personal Information']},
'description': 'The Resort Municipality of Whistler (RMOW) informed members '
'of the public that its municipal website, Whistler.ca, was '
'subject to a recent security breach. The purpose of the '
'attack was to re-direct people to different and, most likely, '
'illicit websites. Immediate action was taken to identify, '
'contain and resolve the issue. Staff became aware that '
'personal information collected through forms on the website '
'may also have been vulnerable. The action was quickly taken '
'to remove the web forms and any associated personal '
'information from the site.',
'impact': {'systems_affected': ['Municipal Website']},
'motivation': 'Redirect to Illicit Websites',
'response': {'communication_strategy': ['Informed members of the public'],
'containment_measures': ['Removed web forms and associated '
'personal information']},
'title': 'Whistler Municipal Website Security Breach',
'type': 'Website Redirection Attack'}