Exploit: Ransomware
Company: Southern First Nations Network of Care
Industry: Non-Profit
Source: https://www.cbc.ca/news/canada/manitoba/sfnnc-cyberattack-update-feb-2020-1.5476083

A Manitoba based Not-For-Profit organization, Southern First Nations Network of Care, is in the process of recovering after a ransomware attack left them without access to their internal IT systems for over six weeks. The organization provides an internal IT network to eight child welfare agencies meaning all parties were affected and without correspondence. Data across the network includes emails regarding foster cases and tracking financial information. The attack was carried out in late November and took until January to get their systems back up and running.

While the organization’s representatives have found no evidence of compromised personal or health information, employees were left without access to computers and email access for the duration of the attack.

The RCMP have speculated that the attack originated in Headingley, MB which is where the Non-Profit’s main office is located. Currently the RCMP are no longer involved in the investigation but the Southern First Nations Network of Care has turned to a third party security firm to investigate further on behalf of the organization.

Although investigations are ongoing, the organization is being tight-lipped when it comes to the details of the case. The organization will not divulge remediation, future precautions and the cause of the attack. They are also refusing further government assistance. Former employees have been warning officials of mismanagement from within the organization which has added to the questions raised and reputational blow-back that the organization is now experiencing from parents and former employees.

Time will tell what comes of the case, for now it appears to be yet another ransomware attack targeting non-profit organizations across Canada.

Protect Your Business Against Modern Cyber Threats

More than ever, organizations of all sizes have been facing a historical rise in cyber attacks and data breaches. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.