Investigation reveals thousands had info exposed in P.E.I. arts centre data breach
![Confederation Centre of the Arts A cyberattack was first reported by the Confederation Centre of the Arts in January.](/content/dam/ctvnews/en/images/2022/8/4/confederation-centre-of-the-arts-1-6014806-1659649237026.png)
The full impact of a data breach at Prince Edward Island’s largest arts centre is now clear. The results of a recently completed investigation show thousands of people had their personal information exposed.
The cyberattack was first reported by the Confederation Centre of the Arts in January. In February, officials confirmed it was a ransomware attack, which exposed some personal information held on the organization’s servers.
“A ransomware attack is where criminals will encrypt or scramble the data and systems of an organization preventing them from being able to access it or use it, essentially rendering it all useless,” said David Shipley, CEO of New Brunswick-based cybersecurity firm Beauceron. “Then they hold it for an extortion payment.”
The centre did pay a ransom to the attackers, but didn't disclose the amount paid.
The recently completed investigation into the breach found about 3,000 people were exposed, some just names and email addresses, but others had their date of birth and social insurance number exposed.
“The attack basically took down our entire IT infrastructure,” said Jodi Zver, Confederation Centre of the Arts’ chief financial officer. “We had to rebuild everything from the ground up, new servers, new everything. That took a very long time, and until we had that done we didn’t have access to the data that told us whose information was there.”
Officials say the affected people have been contacted, with the highest risk being offered credit monitoring and insurance.
This isn’t the first time something like this has happened in the region. The City of Saint John was hobbled after its information technology systems were targeted by a similar attack.
Experts say municipal governments and small non-profit organizations are easy targets.
“These organizations do not, generally, have IT teams and they certainly don’t have robust cybersecurity in place,” said Shipley. “So if you have the choice between going up against a global bank with a half a billion dollar security budget and few thousand eager cybersecurity professionals, or you can pick on the little kids.”
The Confederation Centre’s new system has improved backups and monitoring, as well as new information management policy.
“We’re not storing people’s personal information,” said Zver. “So if or when this happens again then we’ll be fine because we know the information wasn’t there for them to take.”
Officials say the box office and payroll system was not breached, so stored financial information should have remained secure.
The vast majority of successful cyberattacks are against people, not IT infrastructure. Attacks include getting members of an organization to click on a bad link or login to a fake website. Experts say the only real way to prevent these kinds of attacks is with improved training for staff and better cybersecurity protocols.
Correction
This is a corrected article. A previous version incorrectly stated the Confederation Centre did not pay the attackers a ransom.
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.5294232.1725716403!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg)
They were due to leave for their dream cruise in May. Three months on they’re still stuck at the departure port
It was the years-long cruise that was supposed to set sail, but saw its departure postponed… postponed… and postponed again.
Ontario's first domestic case of human rabies since 1967 confirmed in Brant County
An Ontario resident remains in hospital after testing positive for rabies.
4-year-old drowns in backyard pool on Montreal's South Shore
The lifeless body of a child was discovered in a residential swimming pool in Longueuil, on Montreal's South Shore, late on Friday afternoon.
Trudeau insists he's staying on as Liberal leader. But what if he changes his mind?
The Liberal caucus is set to meet in Nanaimo, B.C., next week for a retreat ahead of the fall parliamentary sitting. Prime Minister Justin Trudeau insists he will lead his party into the next election despite polls citing his unpopularity among Canadians. Here's a look at what would happen if he decided to call it quits.
How to get a whole city to stop lawn watering? Experts say praise over punishment
For almost two weeks, a city of 1.6 million people has been told once again to stop watering lawns, take three-minute showers, hold off on laundry and dishes, and let the yellow in their toilets mellow.
Ridley Scott rebuilds Rome for 'Gladiator II'
Scott, Hollywood's perpetual rolling stone even at age 86, may be preparing to unveil 'Gladiator II,' one of his biggest epics yet, but at the moment he's got the Bee Gees on the brain. Scott is developing a biopic on the Gibb brothers. On a recent Zoom call from his office in Los Angeles, he was surrounded by meticulously plotted storyboards.
Former NHLer and addict Brandon Reid's new goal is to help other beat addiction
Brandon Reid was a promising NHLer for the Vancouver Canucks, but his struggles with addiction almost killed him. He now trains other addicts as they fight to stay sober.
Two astronauts are left behind in space as Boeing's troubled capsule returns to Earth empty
Boeing's first astronaut mission ended Friday night with an empty capsule landing and two test pilots still in space, left behind until next year because NASA judged their return too risky.
Despite union protest, new hybrid work rules for federal employees kick in Monday
Public service unions will start the week with an early-morning rally opposing the policy. But despite the unions' 'summer of discontent' and an ongoing court challenge, the new rules will still kick in on Sept. 9.