WRDSB Cyber Hack
InformationCredit Monitoring…
Further analysis has also found that not all former employee information was taken, so some former employees will not require credit monitoring. We do, however, continue to encourage current and former employees who have been impacted to sign up for the one year of complimentary credit monitoring. To register, current WRDSB staff need to use the unique sign-up code provided by TransUnion by email. To determine if they were impacted, former staff need to do the following: Call TransUnion at 1-833-806-1882 State that you are calling in relation to the Waterloo Regional District School Board credit monitoring program. Provide their name in addition to Employee Identification Number (EIN) or past address If the caller is in the data set, TransUnion will provide a credit monitoring code and more information on how to register for one year of complimentary credit monitoring. If after providing the information above, the person’s name is not on the list of individuals impacted, that person’s information was not taken, and they will not be offered . WRDSB Cyber attack on data UPDATE (Sept. 26, 2022) ARM is still pressing the WRDSB for details of the July 2022 Cyber attack. We do know that employee records dating back to 1970, just over a half century, have been compromised. A google search will provide much media coverage. We believe that, If not for the injection of ARM into the discussion, retirees would continue to be uninformed; that is, as of this mailing, retirees have still not received PERSONAL individual notification from WRDSB of the attack and the implications for retirees. We have requested a meeting with WRDSB Director and Superintendents to outline our concerns but our request was rebuffed on Sept. 22 apparently because they objected to statements to the media regarding the need to report CYBER crime, immediately, to the police. Here are FIVE important items relating to: 1. how to claim your TransUnion credit monitoring for one year; (see links at the right of this page) 2 A concise summary of our concerns and questions; 3.What to do if you are a CYBERvictim; 4. How to report an incident to the Waterloo Regional Police Service. ARM concerns: Our retirees have, perhaps naively, assumed that their old personnel records would be compressed, encrypted and archived OFFLINE,not online, or destroyed after 7 years. It appears that this did not happen. Identity theft is a serious concern, and these records have all of the critical data in one nest… SIN, date of birth, address, banking information, dependents etc. ARM has asked WRDSB: 2.1 Retirees need to be notified of the extent and effects on them, directly. Can you do this now? 2.2 What is your "Life cycle of data" policy and can your files be purged now? Why have you kept retiree data? 2.3 Since data on the internet is persistent and pervasive, should credit monitoring be extended beyond one year and, if you are sure that the data was recovered, can you guarantee retirees that you will aid in identity recovery and associated expenses? Nov. ARM Meeting Brock Godfrey of the RCMP/OPP cyber information service will be talking at our Nov. meeting on Cyber crime and how to protect yourself. In the meantime, **** IF YOU ARE a CYBER VICTIM , DO THE FOLLOWING: A. CONTACT THE (WRPS) POLICE AND MAKE A REPORT immediately; B. OBTAIN AN INCIDENCE NUMBER AND REQUEST A COPY OF THE INCIDENCE REPORT FROM THE OFFICER; C. CONTACT ARM SO WE CAN LOOK FOR A CLUSTER OR PATTERN that will indicate that the data breach is involved. Be sensitive to unusual email or telephone calls or regular mail seeking "confirmation" of your name, SIN, banking information, credit card information etc. Always contact your bank or credit card company or CRA directly rather than dealing with unknowns who contact you by telephone or email. It seems that we now have entered a time where caution and care must be exercised. Will be reduced to buying "Identity Insurance" in the same way that we buy House and Auto coverage? |
Cyber Attack/Hack LinksIDShield Canada Information: (click on links to open pdf files)
Get IDShield and/or LegalShield at the group rate IDShield Canada Flatsheet IDShield Product Description--detailed--personalized LegalShield and IDShield combo Retiree Letter from WRDSB Click here to open/download the Retiree Letter EDSS/PHS Online Cyber Hack Petition Page Click here to be redirected to the online Petition Cyber attack secrecy must end Click here to be redirected to the "Opinion" article in the KW Record. (worth the read) Cambridge Today Article Click here to be redirected to the Cambridge Today article. WRDSB, Credit Monitoring Service -- this is a link to the WRDSB page for their instructions (scroll down on this page). You will need your EIN number to register: Click here to be redirected to the WRDSB link. Note: this will "open" a new "tab/page." The WRPS recommends: "If you are a victim of fraud: - Report the fraud to CAFC at 1-888-495-8501 or visit the website at www.antifraudcentre.ca - Report all lost or stolen cheques, bank and credit cards to the issuers - Notify your bank to have your debit card, credit card or bank account numbers change if you have given those numbers to the fraudsters - Complete a credit check with both credit agencies and request that a fraud alert be placed on your file Equifax - 1-800-465-7166 Trans Union - 1-800-663-9980 - Report the fraud to the institution where the money was sent through Western Union - 1-800-448-1492 Money Gram - 1-800-926-9400 PayPal Credit Card company Financial Institution - Notify the local Postal Inspector if you suspect your mail has been diverted to another address" Report online to WRPS (Waterloo Region Police Service): Click here to be redirected to the WRPS reporting website. NOTE that online reporting is for use if you are a Cyber crime victim so When should you call police directly instead? • If you have a known suspect. • If you are in possession of any evidence. • If the value of the theft, loss or property damage is MORE THAN $5,000. • If the incident occurred outside of Waterloo Region. • If someone broke into your home or business. • If this is a motor vehicle collision. • If this is a theft or loss of a firearm. • If this is a theft or loss of Government issued Personal Identification documents, other than Driver Licences • If this is related to any form of personal violence including domestic violence. • If this is related to any kind of vandalism or graffiti that could be described as hate motivated. • If this is related to Fraud Over $25,000 • If this is related to a traffic complaint that is in progress. • If you represent a retail business, other than a LCBO, reporting a theft (shoplifting). |