SLGA Cybersecurity Incident Update for Regulatory Clients
SLGA is providing an update on the cybersecurity incident that occurred on December 25, 2021. SLGA takes the privacy and security of personal information very seriously. SLGA engaged a team of cybersecurity experts to advise SLGA and conduct a forensic investigation of the cybersecurity incident.
SLGA has been in ongoing contact with the Office of the Information and Privacy Commissioner. Based on the results of that investigation to date, SLGA believes that personal information of SLGA’s regulatory clients may have been accessed or taken by an unauthorized third party.
While SLGA’s investigation and ongoing monitoring have not found evidence that SLGA clients’ personal information has been misused, SLGA is issuing this notification to inform its regulatory clients that their personal information may have been accessed or taken by an unauthorized third party.
What information was involved?
The personal information that may have been accessed relates to SLGA current and former clients, including gaming registrants, liquor permit applicants and cannabis permit applicants. The types of personal information SLGA collects about these individuals includes information such as names, addresses, phone numbers and in some cases also includes birth dates, place of birth, drivers licence numbers, criminal records, certain medical information, financial information, previous names (e.g., birth name or maiden name), physical characteristics.
What we are doing and what you can do
SLGA’s security experts continue to monitor for suspicious activity and SLGA will provide updates as appropriate.
To date, there is no evidence to that any misuse of personal information has occurred. This notification is being provided out of an abundance of caution and individuals are encouraged to take basic steps to protect their information, such as:
- Monitor accounts for suspicious activity;
- Update passwords, using complex and different passwords for all accounts;
- Use tools available from banking institutions to monitor account activity;
- Update personal security software and operating systems regularly to ensure these systems are up to date.
SLGA has established a call centre to answer questions on this incident. The call centre can be reached at 1-833-806-1884 Monday through Friday between the hours of 7:30 am to 4:30 pm Central Standard Time.