RCMP investigating hack of spy watchdog network involving theft of files, agency says

spaminator

Hall of Fame Member
Oct 26, 2009
35,817
3,031
113
RCMP investigating hack of spy watchdog network involving theft of files, agency says
Author of the article:Canadian Press
Canadian Press
Publishing date:Aug 26, 2021 • 1 day ago • 2 minute read • Join the conversation
This photo Illustration shows a hacker.
This photo Illustration shows a hacker. PHOTO BY STOCK PHOTO /Getty Images
Article content
OTTAWA — The national spy watchdog says the RCMP is investigating a cybersecurity breach that resulted in the theft of files and the compromise of personal information.

Advertisement
STORY CONTINUES BELOW

Article content
The National Security and Intelligence Review Agency says that between March 9 and 19, a hacker gained access to an agency network that included a database with names, phone numbers, email addresses and scrambled versions of current and previous passwords.


The review agency examines federal security and intelligence activities to ensure they are lawful, reasonable and necessary, and looks into public complaints about key national security agencies and activities.

Individuals affected by the theft of the database have been directly notified, with a few exceptions, the review agency said in a notice posted on its website.

The network in question also included a variety of documents created by the review agency’s corporate, review and legal directorates, as well as personal information related to the agency’s employees and other individuals.

Advertisement
STORY CONTINUES BELOW

Article content
These records included email correspondence with other federal employees, academics, civil society groups, the media and Access to Information requesters, along with complaint allegations submitted by the public for investigation by the agency.

The federal Centre for Cyber Security examined the review agency’s information technology systems after the breach and found no evidence suggesting the hacker improperly accessed or stole this other information.

However, the review agency said it “cannot fully exclude the possibility.”

“We very much regret the impact of this cyber incident.”

The agency, which first acknowledged the breach in a brief April statement, said the incident did not affect its classified systems.

Advertisement
STORY CONTINUES BELOW

Article content
Upon discovery of the digital intrusion in March, the review agency worked with Shared Services Canada and the Cyber Centre “to contain the breach and restore the integrity of its systems,” the agency said.


Acting on a recommendation from the Cyber Centre, the review agency permanently shut down the infiltrated network and related infrastructure. “We also reported the matter to the RCMP, who are conducting a law enforcement investigation into the cyber incident.”

The review agency has also reported the breach to the federal privacy commissioner and the Treasury Board Secretariat.

Neither the RCMP nor the privacy commissioner’s office had immediate comment Thursday.

The review agency says former employees or contractors who have not been notified about the breach should contact the agency at privacy-vieprivee@nsira-ossnr.gc.ca for further information.