Data on current, former Toronto library staff stolen in ransomware attack

Toronto’s public library system has acknowledged that the ransomware gang that hit it last month stole personally identifiable data of employees.

“At this point in our investigation we believe current and former staff employed by Toronto Public Library (TPL) and the Toronto Public Library Foundation (TPLF) from 1998 are impacted,” the library said Tuesday. “Information related to these individuals was likely taken, including their name, social insurance number, date of birth and home address.

“Copies of government-issued identification documents provided to TPL by staff were also likely taken.

“We did not pay a ransom.

“Our cardholder and donor databases are not affected. However, some customer, volunteer and donor data that resided on the compromised file server may have been exposed. It will take us time to analyze data to determine who is affected and how. We will continue to be transparent and notify those affected as appropriate and in light of our findings.”

The municipally-run library is offering two years of complimentary credit monitoring to current and past employees.

The library said last week the Oct. 28 attack was ransomware. Initially it said there was no immediate evidence that data of staff had been stolen.

Municipalities and their library systems are part of what Ontario calls the broader public sector, which also includes hospitals.

Last year, the provincial government received a report from an expert panel on cybersecurity in the provincial broader public sector, which concluded there has been a “systemic underinvestment in both legacy technology replacement and cybersecurity” in the broader public service (BPS).

A key recommendation was that the province create a single body to oversee cybersecurity across the entire broader public service, dispensing advice and demanding accountability. It would augment current governance structures responsible for sector-specific cyber security risks

In response to that report, the government said it “accepted recommendations outlined in the final report.” However, no timeline for implementing the recommendations was given.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer. Former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, Howard has written for several of ITWC's sister publications, including ITBusiness.ca. Before arriving at ITWC he served as a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times.

Featured Story

How the CTO can Maintain Cloud Momentum Across the Enterprise

Embracing cloud is easy for some individuals. But embedding widespread cloud adoption at the enterprise level is...

Related Tech News

Get ITBusiness Delivered

Our experienced team of journalists brings you engaging content targeted to IT professionals and line-of-business executives delivered directly to your inbox.

Featured Tech Jobs