The Saskatchewan government says cybersecurity has been improved after an unauthorized breach of the Young Worker Readiness Certificate Course application.
The third-party app is externally hosted and not linked directly to any Government of Saskatchewan networks, the government said, and no provincial systems were compromised in the breach.
“While an initial investigation did not indicate any evidence that personal information was compromised, there is a potential for information to have been breached,” the government noted.
That information would have been entered by users between Jan. 5, 2021 and Dec. 4 of this year, the government said. It could include names, places of residence, email addresses, details regarding Indigenous identity, school, and age.
READ MORE:
- Gov’t standing its ground after allegedly breaching MLA’s privacy
- Ministry employee accused of being involved in immigration scheme
- eHealth ransomware ‘one of the largest privacy breaches’ in Saskatchewan history
The ministry was informed of the breach last Wednesday.
The course, which is required by 14- and 15-year-olds who wish to work in the province, provides information and training to those entering the workforce for the first time.
The Ministry of Labour Relations and Workplace Safety has reported the breach to Saskatchewan’s privacy commissioner, as required by law, the government noted, and repairs to the system have already been made.
“The initial gap that allowed unauthorized access of the YWRCC application was immediately repaired,” the government said.
The breach is still under investigation, the government said. Anyone with concerns can contact the ministry’s privacy officer at 306-787-5169 or the Office of the Information and Privacy Commissioner at 1-877-748-2298.