Authorities investigating massive security breach at Global Affairs Canada
CBC
Canadian authorities are investigating a prolonged data security breach following the "detection of malicious cyber activity" affecting the internal network used by Global Affairs Canada staff, according to internal department emails viewed by CBC News.
The breach affects at least two internal drives, as well as emails, calendars and contacts of many staff members.
CBC News spoke to multiple sources with knowledge of the situation, including employees who have received instructions on how the breach affects their ability to work. Some were told to stop working remotely as of last Wednesday.
CBC News has also seen three internal emails sent to Global Affairs staff.
"Forensic work has also progressed to help us understand the scope of the data breach," one email said. "The work is ongoing, but early results suggest that many (Global Affairs Canada) users may have been affected."
Another email said the internal systems were vulnerable between December 20, 2023 and January 24, 2024. It informed anyone who connected remotely using a SIGNET (Secure Integrated Global Network) laptop that their information may be vulnerable.
The "compromised" system was the virtual private network (VPN) staff use to access Global Affairs's Ottawa headquarters. The VPN system was managed by Shared Services Canada, the GAC notice said.
Shared Services Canada is a federal department created in 2011 to take over the delivery of email, data centres and network services for many government departments and agencies.
According to Global Affairs, SIGNET is the department's secure computer network. One part of the network holds personal information on shared drives, including employees' personal information. Another part holds classified information.
It's not clear whether secret information was lost in the breach, which lasted longer than a month. It's also not clear who was behind the breach.
Email traffic and files on personal shared drives "may have been compromised," a GAC memo to staff said. GAC also said it's looking into whether "sensitive corporate information," such as credit cards and banking data, may have been breached.
Shared Services Canada and the Canadian Centre for Cyber Security — which is part of the Communications Security Establishment, Canada's cyber-security organization — are investigating the breach, GAC's email to staff said.
"Forensic work, including with these partners, is ongoing to help us understand the impact on our networks and any potential changes in the scope and in the time frame of the data breach," the GAC email to staff read.
The office of the Privacy Commissioner said Global Affairs Canada informed it of a data breach on Jan. 26.
Hundreds of P.E.I. parents can't find child-care spaces, especially for infants. The provincial government says expanding those spots remains a top priority — and it recognizes the concern.
An Alberta judge says a referendum proposal on Alberta separating from Canada goes against Charter and and Treaty rights, in a decision given less than 24 hours after the provincial government introduced legislation that would have ended the court proceeding.
The architect of Alberta's politician recall legislation says it was never meant to be used as a political weapon, but as an "ultimate tool of accountability" if a politician engages in illegal or unethical behaviour.
The Government of Saskatchewan has introduced its long-promised involuntary treatment legislation on the final day of the fall sitting.
The Law Society of Ontario has suspended the licence of Deepak Paradkar, one of seven Canadians arrested in connection with alleged drug lord Ryan Wedding’s cocaine smuggling ring.
London Health Sciences Centre (LHSC) is getting rid of unlimited mental health benefits for staff, blaming ballooning costs and former administrators for implementing it without proper due diligence or oversight.
Netflix has agreed to buy Warner Bros. Discovery's TV and film studios and streaming division for $72 billion US, a deal that would hand control of one of Hollywood's most prized and oldest assets to the streaming pioneer that has upended the media industry.
CBC Calgary kicks off its annual Make the Season Kind campaign this morning at Fratello Coffee Roasters.
CBC Newfoundland and Labrador is kicking off its annual holiday campaign, helping to raise money to support local food banks.
If all goes according to plan, at 6 a.m. AT on Saturday people working at the IWK Health Centre will become the test case for a generational change to Nova Scotia’s health-care system.
One month after Prime Minister Mark Carney announced what he called "generational" military spending, New Brunswick’s defence ecosystem is on high alert.
Miranda Mirlycourtois, 34, looks directly at the camera and makes a confession.
Saskatoon city hall says police spending is projected to be $2.6 million over budget this year. That pushes the city into a $1.2-million deficit position, according to a report that will be considered by city council next week.