3rd Party Data Breach Affects Ontario Science Centre
Exploit: Data Breach, Unauthorized Access
Company: Ontario Science Centre
Industry: Educational Institution
Source: https://www.cbc.ca/news/canada/toronto/science-centre-data-breach-1.5338334
The Ontario Science Centre has warned newsletter subscribers of a data breach that occurred after an employee of a third-party contractor was able to access and download personal data without authorization. An undisclosed number of subscribers and camp/birthday party participants were all potentially impacted by the breach.
Company officials have stated that no customer financial information was included in the breach but the financial toll and reputational damage will affect the company nonetheless. Even though the breach was limited to names and email addresses, the information can still be sold for a profit on the Dark Web or used in further Phishing attacks. It is important for the people impacted by the breach to monitor their financials and lookout for identity theft.
Third-party relationships are common practice in business, but it is important to remember to set restrictions and instill Best-Practices when it comes to safeguarding data of any scope. Consequences can be dire, and in the case of the Ontario Science Centre, although they were not directly responsible, it is their reputation on the line and they will be held accountable for any further repercussions.
Protect Your Business Against Modern Cyber Threats
More than ever, organizations of all sizes have been facing a historical rise in cyber attacks and data breaches. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.