Canoe.ca

Summary

Canoe.ca, a free news and entertainment portal operated by MediaQMI Inc. and previously owned by Sun Media Corp., disclosed that databases containing user information collected over more than a decade were accessed without authorization. The compromised data included names, email addresses, mailing addresses and telephone numbers of roughly one million Anglophone and Francophone users who had provided the information through contests, forums, comment sections or personal pages, but did not contain financial details or social insurance numbers. Upon discovery, the organization launched an investigation with security experts, notified the RCMP, the Office of the Privacy Commissioner and provincial privacy authorities, and provided a contact line for concerned individuals while apologizing and stating efforts to reach affected users.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On September 2, 2017, Canoe.ca became aware of a security incident affecting its databases that contained user information from 1996 to 2008. The company immediately launched a thorough investigation with the assistance of recognized data security experts. The investigation determined that the compromised data did not include financial information such as credit card numbers or social insurance numbers. Instead, the breach exposed personal details of approximately one million Anglophone and Francophone users, including names, email addresses, mailing addresses, and telephone numbers. This information had been submitted by users for contests, forums, comment pages, or personal page hosting. No data collected after 2008 was affected.

Following the investigation, Canoe.ca notified the Royal Canadian Mounted Police, the Office of the Privacy Commissioner of Canada, and all relevant provincial privacy commissioners about the breach. The organization issued a public apology to its users and stated that it was taking every effort to locate and contact those potentially affected. A toll‑free telephone line, 1‑833‑370‑2898, was made available for individuals with concerns about the incident. Canoe.ca emphasized that it had taken all necessary steps to remediate the breach and prevent future occurrences. The company confirmed that no financial or social insurance data had been compromised in the event.

Sources

Sources available to members: 1 source.