Canada student loan record breach affects 583k

A federal agency in Canada lost an unencrypted external hard drive containing the personal information of half a million student loan recipients.

How many victims? 583,000.

What type of personal information? Names, social insurance numbers, dates of birth, loan balances and contact information of borrowers from 2000 to 2006.

What happened? On Nov. 5, an employee of Human Resources and Skills Development Canada discovered the hard drive was missing from an office in Gatineau, Quebec.

What was the response? Two months after the discovery, an internal investigation began. The public was first notified of the incident last Friday. The Royal Canadian Mounted Police (RCMP) was called in to investigate what could be deemed as “one of the largest privacy lapses in Canadian history,” The Vancouver Sun reported.

The federal government will contact all affected individuals, and a toll-free number was set up Monday for those with questions. 

Details: The human resources agency discovered the breach while it was in the midst of another investigation – on the loss of a USB key containing the data of more than 5,000 Canadians.

Quote: “I have expressed my disappointment to departmental officials at this unacceptable and avoidable incident in handling Canadians' personal information,” Human Resources Minister Diane Finley said. “As a result, I have directed that departmental officials take a number of immediate actions to ensure that such an unnecessary situation does not happen again.”

Source: www.vancouversun.com, The Vancouver Sun, “Federal government loses hard drive with information on more than half a million people,” Jan. 11, 2013.

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.