#CyberFLASH: Family services sued after personal info hacked, posted on Facebook

1297516661469_ORIGINALThe “highly sensitive” personal information of 285 clients and people being investigated by the Family and Children’s Services of Lanark, Leeds and Grenville was stolen by a hacker and posted on Facebook due to “reckless” and “disgraceful” conduct of the organization, according to a $75-million class action lawsuit filed today.

The statement of claim, filed in Ontario Superior Court on behalf of a class action representative listed only as M.M., also names the organization’s executive director, Raymond Lemay, Ontario Minister of Children and Youth Services Tracy MacCharles, the Crown and the hacker, identified only as John Doe.

The information — which was posted on the Smiths Falls Swapshop Facebook page earlier this week — came from an electronic report on the organization’s new cases between April and November 2015 that had been stored on an online portal for board members, according to the statement of claim.

It was the organization’s second information breach this year.

The defendants “violated industry standards” and “failed to heed warnings about the inadequate security” to protect the computer systems and website where the confidential information was being stored, according to the statement of claim.

Toronto-based lawyer Sean A. Brown, who represents the plaintiff, called the information leak a “very serious breach of privacy” in an email to CBC News.

Read more here

About canux
© 2013 CyberTRAX Canada - All Rights Reserved.
Sponsored by C3SA Corp.