Cyber Incident Victim: Celero Solutions
Date:
Jun 2022
Location:
Canada
Summary
A cybersecurity incident targeted multiple Canadian credit unions through their technology services provider, Celero Solutions, involving unauthorized access to the company's systems. The provider activated its incident response team, implemented security measures, and assured no member data was compromised or unauthorized access to member-facing systems occurred. Some credit unions, including one in Manitoba, temporarily limited in-branch services as a precaution while maintaining online, mobile, ATM, and point-of-sale access. External experts assisted investigations, and while online service accessibility was intermittently affected for some members, the incident was contained with reinforced security protocols. No evidence of data breaches was identified across affected institutions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 3 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On June 8, 2022, Calgary-based technology services provider Celero Solutions detected unauthorized access to its systems, prompting immediate activation of its incident response team and implementation of unspecified security measures. The company, which provides digital services to over 115 Canadian credit unions and financial institutions, issued public assurances that its network and systems were secure following containment efforts. While Celero confirmed the cybersecurity incident affected an unspecified number of credit union clients across Canada, it did not disclose the total count of impacted institutions. Initial investigations revealed no evidence of compromised member data or unauthorized access to member-facing systems as of June 10. Some credit union members experienced disruptions accessing online services due to precautionary measures taken by individual institutions during the ongoing investigation.
Sunrise Credit Union, operating 19 branches in southwestern Manitoba, separately confirmed experiencing a cybersecurity incident on June 8 that aligned with Celero's timeline. President and CEO Tim Klassen stated the incident was contained through rapid implementation of standard response protocols, including access shutdowns and enhanced security measures, with external cybersecurity experts engaged to support the investigation. While in-branch services remained limited as a precaution, members retained access to online banking, mobile applications, ATMs, and point-of-sale systems throughout the disruption. Both Celero and Sunrise Credit Union maintained there was no evidence of member data compromise at any stage. Credit Union Central of Manitoba, the provincial trade association, declined to specify the number of affected institutions but emphasized credit unions' regulatory compliance and ongoing cybersecurity prioritization, deferring detailed incident inquiries to Celero as the service provider.