OPC Data Breach Updates - Last Update: 12 Jun 18 - Arrest Made
12 Jun 2018
The OPC can announce that after several months of investigation and cooperation with the York Region Police an arrest has been made in connection with the January 2018 data breach.
While we are not currently at liberty to name the accused, OPC can confirm the following charges have been brought:
· Unauthorized use of a computer
· Identity Theft
· Mischief with Data
In total the accused could be facing a maximum of 25 years in prison if convicted.
At this time, it does not appear that the data taken/destroyed in January has been sold.
The OPC appreciates your patience during this breach. We understand it can be frustrating to go long periods of time without an update, however we are sometimes limited in what we can share due to privacy and investigative concerns.
We will continue to send updates as they become available.
8 Feb 2018
On return from the holiday break, it was determined that the electronic records maintained by the OPC for the purposes of conducting business were accessed by an unknown person and the information deleted. The OPC is operating under the belief that the data was downloaded/copied without authorization and taking appropriate security steps.
There is a risk that your personal information could be used inappropriately, as such the OPC strongly recommends that you update your passwords for the email address(es) you provided to the OPC. We also recommend monitoring any accounts that share the same email address or password you have used for the OPC website.
As the OPC does not store any payment, pay card or financial information on its website no financial information was impacted. The following non-financial fields were compromised:
All registration or applicant information may have been impacted. This does not include government ID numbers. The following non-financial fields were among those compromised:
First Name |
Given Name |
Last Name |
Date of Birth |
Other/Former Surname |
Spouse/Partner |
Street Address |
City |
Province |
Postal Code |
Residential Phone |
Cell Phone |
Work Phone |
Primary Email |
Secondary Email |
Employer |
Should you have unusual activity in your email accounts or by telephone or mail, please contact York Regional Police or your local police service. Further information will be made available when it is known. The Privacy Commission website provides advice for protecting your identity and privacy at https://www.priv.gc.ca/en/privacy-topics/identity-and-privacy/ and elsewhere on their website.
The matter is currently under investigation by York Regional Police Service. The OPC is fully cooperating with their investigation as well as conducting its own investigation into the breach.
In order to access the OPC website you will need to reset your password. This is mandatory and aids in the securing of your information and privacy. If you have any questions or concerns, please reach out to the OPC Privacy Officer at opcprivacy@aircadetleague.on.ca
In order to reset your password, follow these steps:
The Ontario Provincial Committee of the Air Cadet League of Canada is providing this information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Digital Privacy Act. The Office of the Privacy Commissioner of Canada will be notified if it is determined to be appropriate.