The government agency Global Affairs Canada experienced a "prolonged" data breach, during which internal systems were reportedly left vulnerable between 20 Dec. 2023 and 24 Jan. because of a compromised VPN system, CBC News reports. The breach targeted two internal drives, and the calendars and contacts of GAC staff. The drives contain employees' personal information on one and classified information on the other, however, it was unknown if classified information was accessed during the breach, which is under investigation by Shared Services Canada and the Canadian Centre for Cyber Security.