U of G students notified of benefits data breach 4 months later
The provider of health, dental, and wellness benefits at the University of Guelph (U of G) has begun notifying students of a data breach which included access to personal information.
A post on the Central Student Association’s website says Gallivan, the provider of those plans, began sending notifications via email this week.
CTV News Kitchener was provided an email sent by Gallivan to U of G students on Wednesday morning informing them of the breach.
“On March 10, 2023, we were informed of a data breach at a third-party security company used for secure file transfer of data between our benefit administration systems, service partners, and the Central Student Association (CSA) and Graduate Students’ Association (GSA),” the email reads.
According to the timeline provided, the email was sent to students over four months after the data breach was discovered.
“After a thorough investigation involving our internal and external cyber security advisors, we determined the following personal information was included in this incident: your student ID, name and date of birth. This information could potentially be used for fraudulent purposes, including identity theft,” the email reads.
GALLIVAN RESPONDS
In a message to CTV News, a representative for Gallivan said the company was informed of a data breach at third-party security company, Fortra GoAnywhere MFT, which they use for secure file transfer of data.
"We worked quickly to determine the quantity and type of data exposed. Limited student personal information was included in the incident and we are communicating with those students who were impacted," said Binny T. Abraham, senior vice president of operations and client services at Gallivan.
The company is offering credit monitoring and identity theft protection to those impacted.
“We’re currently unaware of any ongoing exposure of this information and we’re not aware of it being misused,” said Abraham.
The message from Gallivan indicated that the incident impacted over 100 organizations worldwide.
U OF G RESPONDS
In an email, the U of G told CTV News the third-party data breach does not involve university systems.
“The University was informed of this incident by the CSA and has been supporting the CSA facilitating Gallivan's notification to impacted students. Impacted students are welcome to contact the University's privacy office with general questions or concerns about their data. Questions relating to the third-party data breach should be directed to Gallivan,” the university said.
CTVNews.ca Top Stories
LIVE AT 11 EST Trudeau to announce temporary GST relief on select items heading into holidays
Prime Minister Justin Trudeau will announce a two-month GST relief on select items heading into holidays to address affordability issues, sources confirm to CTV News.
'Ding-dong-ditch' prank leads to kidnapping, assault charges for Que. couple
A Saint-Sauveur couple was back in court on Wednesday, accused of attacking a teenager over a prank.
Joly says next U.S. ambassador Hoekstra will help advance 'shared priorities'
Foreign Affairs Minister Melanie Joly is welcoming president-elect Donald Trump's pick for the next U.S. ambassador in Ottawa.
Estate sale Emily Carr painting bought for US$50 nets C$290,000 at Toronto auction
An Emily Carr painting that sold for US$50 at an estate sale has fetched C$290,000 at a Toronto auction.
Parole board 'working' to have Bernardo victims' families attend hearing in-person
The Parole Board of Canada says it is now working to allow victims' families to attend Paul Bernardo's parole hearing and deliver their victim impact statements in person.
Border agency detained dozens of 'forced labour' cargo shipments. Now it's being sued
Canada's border agency says it has detained about 50 shipments of cargo over suspicions they were products of forced labour under rules introduced in 2020 — but only one was eventually determined to be in breach of the ban.
Ontario man agrees to remove backyard hockey rink
A Markham hockey buff who built a massive backyard ice rink without permissions or permits has reluctantly agreed to remove the sprawling surface, following a years-long dispute with the city and his neighbours.
2 boys drowned and a deception that gripped the U.S.: Why the Susan Smith case is still intensely felt 30 years later
Inside Susan Smith’s car pulled from the bottom of a South Carolina lake in 1994 were the bodies of her two young boys, still strapped in their car seats, along with her wedding dress and photo album. Here's how the case unfolded.
This is how much money you need to make to buy a house in Canada's largest cities
The average salary needed to buy a home keeps inching down in cities across Canada, according to the latest data.