Canadian Lawyer reports the Federal Court of Canada certified a class-action lawsuit against the Canadian government over claims stemming from a data breach of federal financial services in July 2020. Plaintiffs alleged "operational failures" by the government as thousands of individuals were affected by a breach of financial accounts after hackers accessed the Government of Canada Branded Credential Service Key. Reviews by cybersecurity professionals suggest hackers were credential stuffing accounts with the Canada Revenue Service and Employment and Social Development Canada programs in order to fraudulently obtain COVID-19 benefits.
1 Sept. 2022
Lawsuit concerning federal government services breach receives class-action status
Related stories
Home sweet home or location, location, location: The best place for your company's privacy office
Transparency, good data and documentation: How HR can navigate the EU AI Act
Mind matters: Shaping the future of privacy in the age of neurotechnology
A view from DC: The FTC's next priorities
Notes from the IAPP Canada: CPS25 highlights privacy, AI, cybersecurity evolution