Employee banking information stolen from Tennis Canada in cyber incident: Report

Tennis Canada, a non-profit that oversees professional events and junior training programs, has acknowledged being hit by a cyber event in June resulting in “precautionary identity theft protection and credit monitoring to all of our employees.”

In a statement this week, the association said that after an investigation last month “there was no evidence that any personal data was compromised.”

However, on Thursday the Journal de Québec said that according to a reliable source, names, addresses, social insurance numbers, and employee banking information was copied.

IT World Canada was alerted about a possible incident on July 13 by a staff member of a cybersecurity firm who watches the dark web and saw that the Aikira ransomware gang listed Tennis Canada as a victim on its data leak site. Some of the files listed by the gang as proof of the theft were named “Accounts Payable.”

In response to a query, a day later, Oliver Wheeler, the association’s manager of communications replied, “Our systems are working fine and are secure right now but thank you for bringing to our attention that this group lists Tennis Canada on its portal. We are looking into it.”

On Wednesday, Wheeler sent us this updated message:

“We can advise that Tennis Canada experienced a cyber incident in June. In accordance with our established protocols, we immediately implemented precautionary security measures and hired a team of experts to assess the situation and assist our IT department. As a result of our team’s actions, we quickly secured our systems. Since then, our systems have been operating normally, the situation was resolved, and enhanced controls were implemented to prevent this from happening again.

“Based on the investigation concluded in July by our cybersecurity experts, there was no evidence that any personal data was compromised.

“We also want to reassure all ticket-buyers that their data is safe and was not affected by the incident. Their information is hosted by a secure third-party partner. Therefore, purchasing a ticket for one of our upcoming events remains entirely safe.”

After being asked about the discrepancy between Wednesday’s statement and the Journal de Québec news story, Wheeler emailed this statement saying an incident occurred on June 8. Without detailing what the incident was, he said, “We deliberately chose not to interact with the cybercriminals that caused this incident and focused all of our energy on protecting our systems. We understand they claimed to have copied information from our systems, and we offered precautionary identity theft protection and credit monitoring to all of our employees.

“All ticket-buyer data is safe and was not affected by the incident. This information is hosted by a secure third-party partner. Therefore, purchasing a ticket for one of our upcoming events remains entirely safe.”

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer. Former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, Howard has written for several of ITWC's sister publications, including ITBusiness.ca. Before arriving at ITWC he served as a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times.

Featured Story

How the CTO can Maintain Cloud Momentum Across the Enterprise

Embracing cloud is easy for some individuals. But embedding widespread cloud adoption at the enterprise level is...

Related Tech News

Get ITBusiness Delivered

Our experienced team of journalists brings you engaging content targeted to IT professionals and line-of-business executives delivered directly to your inbox.

Featured Tech Jobs