Cyber Incident Victim: Pipestone Kin-Ability Centre
Date:
Oct 2019
Location:
Canada
Summary
A Saskatchewan non-profit organization supporting adults with cognitive disabilities lost over $400,000 in a cyber attack targeting its payroll system, with unauthorized access enabling the theft of operational and employee wage funds. The organization immediately notified law enforcement, secured its systems against further withdrawals, and confirmed employee wages remained unaffected while initiating a security review of its payroll processes. The RCMP recovered an unspecified portion of the stolen funds during its ongoing investigation, with the victim expressing hope for full recovery and accountability through the legal process.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 1, 2019, Pipestone Kin-Ability Centre, a Saskatchewan non-profit supporting adults with cognitive disabilities through activity programs, group homes, and supported living services, discovered a cyber attack targeting its payroll system. Unauthorized actors stole over $400,000 designated for general operations and employee wages. The organization immediately notified the Saskatchewan RCMP and implemented measures to block additional unauthorized withdrawals. No employee wage payments were disrupted despite the theft. The breach exclusively compromised financial resources rather than personal data or operational systems beyond the payroll infrastructure. Pipestone Kin-Ability publicly confirmed the incident through a website news release but declined further commentary.
The RCMP launched an ongoing investigation, recovering an unspecified portion of the stolen funds. Pipestone initiated a security review of its payroll processes to prevent future attacks while maintaining all client services without interruption. The organization emphasized the stolen funds’ critical role in sustaining employee support programs and client quality-of-life initiatives. Located in Moosomin, 214 kilometers southeast of Regina, the non-profit expressed hope for full financial recovery and criminal accountability through law enforcement efforts. No operational details about the attackers’ methods, potential suspects, or specific security changes were disclosed publicly.