The PII of at least 51,400, and possibly as many as 360,000 educators, in Quebec Province was exposed when a malicious actor obtained login credentials to the Ministère de l’Éducation et de l’Enseignement supérieur network.
The ministry received confirmation of the breach on February 19 noting in a statement that a single database was accessed that contained the Social Insurance Number, last name, first name, date of birth of full-time and those substitute teachers who completed a contract of 20 days or more. The data base that was compromised contained 51,400 names, but the ministry is informing all 360,000 of its educators out of an abundance of caution.
“The 360 000 people in the database in question will receive a letter indicating the procedure to follow to contact a credit monitoring company. The government will assume all costs related to the protection of people who are not already covered,” the ministry said.
The ministry did not reveal when the attack took place but did say that so far about 400 teachers reported their identities have been stolen.
Letters are being sent to all 360,000 potential victims and the ministry will pay for credit monitoring and a hot line has been established (1 877 644‑4545). However, those who have incurred losses due to the data breach will not be reimbursed by the government, instead the ministry suggested they resort to using the common law courts.