Canada’s Biggest Data Breaches of 2024

Canada’s Biggest Data Breaches of 2024

This year has seen some of the most damaging data breaches in history. In 2024 alone, hackers stole billions of personal records, and it’s almost guaranteed your data is among those stolen records. Let’s look at some local attacks and what you need to know about protecting your information.

City of Hamilton

What happened:

In February 2024 Hamilton experienced a significant ransomware attack that disrupted their municipal services. The attack affected various systems, including phone lines, emails, websites, and the Hamilton Street Railway's (HSR) computerized scheduling.

Who is exposed: Hamilton Residents/ Tax Payers
Compromised data: All that has been said is ‘significant operational disruptions, and $9.6 million dollars has been spent on recovery as of November 2024.

London Drugs Ransomware Attack

What Happened:

In May 2024, The LockBit ransomware group targeted Canadian retailer London Drugs, leading to the temporary closure of all its locations nationwide. The attackers demanded a $25 million ransom, threatening to release data within 48 hours. London Drugs refused to pay and some data was leaked, prompting the company to offer identity theft protection services to affected employees.

Who is exposed: Corporate Files and Employee information.
Compromised data: Financial details, medical records, immigration applications, relationship disclosures, termination letters, performance assessments, emergency contacts and electronic signatures.

Snowflake (600 Million-Plus Records And Growing)

What happened:

In May 2024, cloud data giant Snowflake announced a system breach caused by stolen employee credentials. Hundreds of millions of customer records were stolen from Snowflake customers, including 560 million from Ticketmaster, 79 million from Advance Auto Parts and 30 million from TEG.

Who is exposed: Millions of customers from many of Snowflake’s 165 corporate customers
Compromised data: Customer records.

Toronto Transit Commission (TTC) Cyberattack

What happened:

The Toronto Transit Commission suffered a cyberattack in September 2024 that disrupted online services, including the Wheel-Trans booking system and email communications. The attack did not affect transit operations, but it raised concerns about the cybersecurity resilience of critical infrastructure.

Who is exposed: 25,000 current and former employees, as well as pensioners,
Compromised data: Names, addresses, and Social Insurance Numbers.

How To Protect Yourself

You can’t stop companies from getting hacked. However, you can prevent the situation from worsening for YOU by taking a few extra steps to protect your data. Here’s what to do:

  • Review your health-related communications: With so many breaches affecting health institutions this year, pay attention to your statement of benefits and look for services you didn’t receive. If you spot something fishy, tell your health care provider and insurance company right away.
  • Freeze your credit: This will stop criminals from opening a credit card or loan in your name.
  • Update your log-in credentials: If you know what accounts were hacked, change your credential, and also change the credentials to major accounts like your bank. Set up alerts, too, so you’re immediately aware of any unusual activity.
  • Be wary of e-mails: After a breach, hackers access all kinds of information and may use that to send fraudulent e-mails. Slow down, read carefully and verify requests before taking any action.

ClickCease