Major data breach at one of Canada's largest investment firms 'so dangerous'
A data breach of social insurance numbers (SIN) belonging to the clientele of one of Canada’s largest investment firms is “so dangerous,” according to a former high-level employee at the company.
Terry Beck was the Manager of Operations at Mackenzie Investments, and an employee at the company for nearly 20 years, up until he retired in 2019. When he left, he divested his investments.
Yet a couple weeks ago, he said he received a letter from the corporation explaining that his SIN was compromised in a data breach.
Mackenzie informed clients in a letter dated April 27 that a third-party vendor, InvestorCOM Inc., was compromised by a cyber security incident related to data transfer supplier GoAnywhere. Clients' account numbers, names, and addresses were also compromised, according to one of the letters, reviewed by CTV News Toronto.
“This is so dangerous,” Beck told CTV News Toronto. “It’s an opening of a door to a lot of places.”
To work in Canada or access government programs and benefits, a nine-digit number – known as a SIN – is assigned to an individual. It is “private” and “illegal” for anyone else to use, according to the federal government.
“It’s the gateway to the government,” Beck said.
He said that when he was manager of operations four years ago, SINs were not shared with third-party vendors and that the practice could lead to continued privacy breaches.
A spokesperson for Mackenzie later disputed this fact, telling CTV News Toronto it was not correct.
In a statement on Monday, a Mackenzie spokesperson explained the company now uses SINs to identify and provide notifications to clients.
“Companies may use SINs as an identifier for reasons such as consolidating investor holdings so that fees associated with their account are reduced,” a spokesperson said.
“They may also share a client’s SIN as a unique identifier to third parties such as a dealer, group plan sponsor, and third-party service providers."
Beck acknowledged the necessity of consolidating a client’s accounts, but he questioned why a random set of numbers couldn’t stand in as a unique identifier, instead of a highly sensitive form of government identification.
“It could rear its head at any time down the road,” Beck said.
In a statement issued following the ransomware attack, Mackenzie said it regrets the effects the breach has had on their clientele.
“Mackenzie takes privacy and data protection very seriously and we are committed to protecting the confidentiality of all personal information. We greatly regret any concern or inconvenience this incident may cause to our valued clients,” a company spokesperson said in the statement.
The spokesperson said there has been no evidence of data misuse at this point in time and that the company reported the incident to the federal privacy commissioner, in addition to provincial privacy commissions.
LONG WAITS FOR RESOURCES
Shelly Rae, a Toronto resident and Mackenzie investor of about three decades, said she was concerned when she received a letter in the mail explaining that her personal information had been exposed.
“When someone has your name, phone number, address and SIN, that’s a pretty significant breach,” she said. “They can go on to steal your identity.”
After being notified that her information had been compromised, she said she spent about 10 hours on the phone in an attempt to sign up with a TransUnion credit monitoring service that Mackenzie is offering to impacted customers.
A Mackenzie spokesperson said the company is experiencing "particularly high volumes" of calls, leading to long wait times for victims of the breach seeking resources.
They said they "sincerely apologize" for the delays.
“The TransUnion call centres are doing their best to address all client concerns as quickly as possible by enhancing service capacity to help manage call volumes. We are proactively working with TransUnion to manage the high volume of calls and appreciate people’s patience,” the spokesperson said.
Despite credit monitoring services offered, Beck said “there’s nothing you can do" to change the fact that your SIN number is out there. "It will always be out there," he said.
Mackenzie noted that it is monitoring a range of sources for exposed data and to date have found no evidence of misuse.
CTVNews.ca Top Stories
CRA no longer requiring 'bare trust' reporting in 2023 tax return
The Canada Revenue Agency announced Thursday it will not require 'bare trust' reporting from Canadians that it introduced for the 2024 tax season, just four days before the April 2 deadline.
He didn't trust police but sought their help anyway. Two days later, he was dead
Jameek Lowery was among more than 330 Black people who died after police stopped them with tactics that aren’t supposed to be deadly, like physical restraint and use of stun guns, The Associated Press found.
Fluid in eye cells can 'boil' if you watch the eclipse without protection: expert
Millions of people in parts of Eastern and Atlantic Canada will be able to see the rare solar eclipse happening on April 8. But they should only look up if they have proper eye protection, experts say.
NEW More unauthorized products for skin, sexual enhancement, recalled: Here are the recalls of this week
Health Canada and the Canadian Food Inspection Agency recalled various items this week, including torches, beef biltong and unauthorized products related to skin care and sexual enhancement.
Where is the worst place for allergy sufferers in Canada?
The spring allergy season has started early in many parts of Canada, with high levels of pollen in some cities already. Experts weigh in on which areas have it worse so far this season.
Do these exercises for core strength if you can't stomach doing planks
Planks are one of the most effective exercises for strengthening your midsection, as they target all of your major core muscles: the transverse abdominis, rectus abdominis, external obliques and internal obliques. Yet despite the popularity of various 10-minute plank challenges, planking is actually one of the most dreaded core exercises, according to many fitness experts.
Grandparent scam: London, Ont., senior beats fraudsters not once, but twice
It was a typical Tuesday for Mabel Beharrell, 84, until she got the call that would turn her world upside down. Her teenaged grandson was in trouble and needed her help.
Angst and calls for resting places as Surrey, B.C., pet cemetery development continues
A single headstone is all that remains of dozens of markers for long-buried pets in a subdivision in Surrey’s Newton neighbourhood, where a half-acre parcel bears a large sign announcing the proposed construction of new homes.
Polar ice is melting and changing Earth's rotation. It's messing with time itself
One day in the next couple of years, everyone in the world will lose a second of their time. Exactly when that will happen is being influenced by humans, according to a new study, as melting polar ice alters the Earth’s rotation and changes time itself.