URGENT NOTICE TO MEMBERS
The NunatuKavut Community Council (NCC) was informed this afternoon of a recent privacy breach potentially involving personal data held by a third-party company, Advanced DataSystems (ADS), that provides support for NCC’s membership registry. This breach occurred at the premises of ADS, based in Saskatchewan, and was an internal cyberattack on their local network.
Please note that the registry located on NunatuKavut.ca remains secure and this notice is being shared as a precaution.
WHAT DOES THIS MEAN FOR NCC MEMBERS?
ADS has taken very swift action and is working with a renowned Cybersecurity company to determine the extent of the breach.
While NCC’S membership registry system itself is not compromised, a backup copy of our database may have been part of the breach. This may include the personal information of NCC members provided as part of the membership application process.
ADS has informed us that, while some files from their network have been taken, NCC’s data is currently not part of that list. At this point, ADS cannot confirm that your personal data was accessed but we cannot rule it out.
WHAT STEPS HAVE ADVANCED DATASYSTEMS TAKEN TO DATE?
Once the breach was detected, ADS disconnected and isolated their network and isolated all devices on the network. They have undertaken hardware replacement, updates to malware software, and sanitized all devices prior to reconnecting to the network. They have removed the client databases that included your personal information from the network and continue to investigate for any other potential data at risk.
ADS has added a section on their website www.ads.ca/security which will be updated to provide information and links to resources that offer information on what to do if your personal information has been compromised.
WHAT SHOULD NCC MEMBERS DO?
Your personal information can be used for acts of identity theft, fraud, or email phishing attacks.
It is recommended that you take the following steps to protect yourself:
- Watch your credit score – free credit score sites are available online
- Notify your bank of the breach so they can monitor your accounts
- Monitor your accounts – examine them for unexplained activity
- Change your passwords – Ensure use of secure passwords
- Always use Multifactor Authentication when it is offered
- Be cautious of email phishing scams- NEVER click on suspicious links.
- Check for updates on www.ads.ca/privacysuggestions.html
WHO DO I CONTACT AT NCC FOR MORE INFORMATION?
Questions and concerns about the security and potential access of your personal information may be directed to:
Executive Manager of Governance and Rights Secretariat
NCC takes our role in safeguarding the personal information of NCC members and ensuring it is used in an appropriate manner very seriously. We are very closely monitoring this situation and will communicate any new information from ADS as soon as we receive it.