August 14, 2023 (Update) – NFN received an update from Advanced DataSystems Ltd. (“ADS”) on August 9, 2023 to inform us that NFN data was not part of the files exfiltrated in the cyber incident. ADS has assured us that they have taken additional measures to harden their network and modify their client data policies.
We continue to take our role in safeguarding your personal information and using it in an appropriate manner very seriously, and hold third-party service providers to the same standard.
July 27, 2023 – Nipissing First Nation became aware of a breach at the premises of Advanced DataSystems Ltd. (ADS) on July 24, 2023. The breach occurred on or about July 12, 2023.
ADS provides one or some of our administrative tools. An outside Threat Actor obtained access to the ADS network, which was noticed on the morning of July 12, 2023. ADS is working with a renowned cyber security company to determine the extent of the breach. At this point, Exfiltration of Data has not been confirmed but cannot be ruled out. Once the breach was noticed, ADS disconnected and isolated their network and isolated all devices on the network. They have undertaken hardware replacement, updates to malware software, and sanitized all devices prior to reconnecting to the network.
What does this mean for your personal information?
They have removed the client databases that included your personal information from the network and continue to investigate for any other potential data at risk.
It is possible that the compromised ADS servers contained copied information that NFN provided to them under an agreement for services. Your personal information is likely to have included: name, address, phone number, email address, registry number, and birthdate.
This information can be used for acts of identity theft, fraud, or email phishing attacks.
We take our role in safeguarding your personal information and using it in an appropriate manner very seriously. It’s important to clarify that the breach experienced by ADS has not, and cannot, compromise the integrity of the servers managed by Nipissing First Nation.
How to protect yourself
- Watch your credit score – free credit score sites are available online: clearscore.com/ca/credit-scores
- Monitor your accounts – examine them for unexplained activity and notify your bank
- Change your passwords – ensure use of secure passwords
- Use Multifactor Authentication (MFA) – for more information on MFA, visit nfn.ca/mfa
- Be cautious of email phishing scams – never click on suspicious links
For updates
ADS has initiated a section on their website to provide updates and links to resources on what to do if your personal information has been compromised: ads.ca/privacysuggestions.html
For more information
Cathy McLeod
Land Manager
705-753-2922 ext. 1233
