• Print
  • Send to a friend
  • Comment (30)
  •  

Government to help with credit protection after privacy breach

Human Resources Minister Diane Finley

Human Resources Minister Diane Finley

Published on January 25, 2013
Published on January 25, 2013
Ryan Ross  RSS Feed
Topics :
Equifax , Human Resources , Skills Development Canada

Canada Student Loan borrowers who were victims of a privacy breach can get free credit protection after an employee lost a portable hard drive containing personal information for about 583,000 people.

In a news release, Diane Finley, the minister for Human Resources and Skills Development Canada (HRSDC), announced it had contracted credit bureau Equifax to provide credit protection to the affected borrowers.

"While there is no evidence that information has been fraudulently accessed or used, I want to reassure Canadians that we are serious about protecting their personal information," she said.

The Equifax service will flag credit files and add an extra layer of protection against potential fraud by notifying lending institutions to take extra precautions with applications involving the affected person.

What it doesn't do is monitor the person's credit for fraudulent activity and while credit bureaus do offer extra protection, they come at an additional cost.

The move came after the government notified the public several weeks ago that there had been a privacy breach involving Canada Student Loan borrowers from 2000-2006.

There were 4,500 Islanders included in the 583,000 people whose Social Insurance Number and other private information was on a portable hard drive that went missing in December.

The Office of the Privacy Commissioner and the RCMP have both been investigating the matter.

A spokeswoman for the privacy commissioner's office said they have received several hundred calls and complaints from people across the country who were concerned about the breach.

Anyone who was affected can call HRSDC instead of the credit bureau to get their credit file flagged and will have to provide consent for the government to share their information with Equifax.

When news of the breach became public, the government announced it was sending letters to everyone who was affected.

The same information was given to anyone who called to see if they were on the list, but many people have yet to receive the letters.

Alyson Queen, a spokeswoman for HRSDC, said that's because there was such a large number of letters going out that they weren't all sent at once.

The letters were also updated once the government knew it would be working with Equifax to provide the credit protection.

"Given the large volume of letters it was to be staggered quite a few days," she said.

Queen said since the breach was made public, HRSDC staff have fielded about 120,000 calls, about half of which were from people who were affected.

"Pretty significant call volumes," she said.

Since HRSDC notified the public about the privacy breach, it said there was no reason to believe the missing information was used for fraud and Queen said that is still the case.

"The hard drive is missing but through all of that investigative process we have no reason to believe that the information has been compromised and so obviously we will continue to investigate further," she said.

For Amanda Thoy, who was one of the privacy breach victims, she said what the government is doing doesn't actually monitor people's credit and only flags it.

"What we were fighting was for them to pay for the credit monitoring," she said.

Thoy said she is also concerned that the government isn't setting anything up to pay for fraud insurance or help people if they do become victims of fraud because of the privacy breach.

"There is no fund to pay that out," she said.

To register for the credit protection call 1-866-885-1866.

rross@theguardian.pe.ca

twitter.com/ryanrross

Comments

  • Username
    Sky
    - February 8, 2013 at 18:01:51

    Hello all, I myself just got the letter regarding missing information. I have been listening to the news almost since mid Jan, the news was out. There was no real action taken, because if the government is really spending any money to "save" us, they would have at least spent money on service to immediately contact effected individuals, on the contrary, they just left things to go out on regular service. My letter was dated Jan 25 and just arrived today, it took 10 days in the mail?? why? The event of lost data happened around Jan 10, why am I hearing after 30 days??!!! this is Identity theft we are talking about. What if the lost data fell in the hands of some terrorist organization? This is gold for anyone, Canadian IDs, people would pay their own lives to just get a SIN number anywhere. Now, they are getting not only SIN #s but also full information with passwords/account information for those who have direct payment/personal family information. Also, if you had any problem with paying your loan, will also be there so pretty much your life is associated with the data. I really personally support a real action plan against this! I don't think the government is actually taking this seriously. Equifax accommodation offered is really NOTHING at all. We all have paid for equifax and know that the cost of the services offered is really minimal! Also, who said that these data won't show up after 6-10 years? or even at 15 years? This is ridiculous!!!! When you make a mistake in any place of the world, you get punished. If someone is asking for money or loan forgiveness, then it is a matter of punishment that "someone" has to face in order for such mistakes to never happen. Also, punishment will force "someone" to think 100 times before placing personal information on portable devices and dare to transport it. Why would the data be transported in the first place!!!

    Submit a comment

  • Username
    Sky
    - February 8, 2013 at 05:10:34

    Hello all, I myself just got the letter regarding missing information. I have been listening to the news almost since mid Jan, the news was out. There was no real action taken, because if the government is really spending any money to "save" us, they would have at least spent money on service to immediately contact effected individuals, on the contrary, they just left things to go out on regular service. My letter was dated Jan 25 and just arrived today, it took 10 days in the mail?? why? The event of lost data happened around Jan 10, why am I hearing after 30 days??!!! this is Identity theft we are talking about. What if the lost data fell in the hands of some terrorist organization? This is gold for anyone, Canadian IDs, people would pay their own lives to just get a SIN number anywhere. Now, they are getting not only SIN #s but also full information with passwords/account information for those who have direct payment/personal family information. Also, if you had any problem with paying your loan, will also be there so pretty much your life is associated with the data. I really personally support a real action plan against this! I don't think the government is actually taking this seriously. Equifax accommodation offered is really NOTHING at all. We all have paid for equifax and know that the cost of the services offered is really minimal! Also, who said that these data won't show up after 6-10 years? or even at 15 years? This is ridiculous!!!! When you make a mistake in any place of the world, you get punished. If someone is asking for money or loan forgiveness, then it is a matter of punishment that "someone" has to face in order for such mistakes to never happen. Also, punishment will force "someone" to think 100 times before placing personal information on portable devices and dare to transport it. Why would the data be transported in the first place!!!

    Submit a comment

  • Username
    James Morrow
    - January 31, 2013 at 14:57:42

    Just adding in case anyone is mistaken, as I see this mentioned earlier. My student loans were paid in full but the HRDC still had my records and my data was still lost along with everyone elses. So myself and many others are not looking for handouts or to have our debt written off we are looking for the government to stand up and hold those responsible accountable as well as assist those affected to ensure we dont wake up one day to find out we just got a mortage in Ontario. I didnt spend last 15 years babying my credit for it to be flushed downt the drain because some federal employee is incompetant or worse a THIEF.

    Submit a comment

  • Username
    Amanda H
    - January 28, 2013 at 19:31:25

    @Amanda Thoy - Very well said. All of your comments and statements are what all of us affected feel. I wish that everyone one of us had the opportunity to make a statement to someone, in person. This is unacceptable and it's frustrating that not only is there nothing that we can do about it but set up some flags, but there's nothing that those responsible are doing about it either. I don't understand how there were no security measures in place, we have more than that at the privately owned company I work with. Way to go Gov of Canada! Way to forget about security measures, and way to not take care of the people putting money in your pockets. Unfortunately there's nothing I can do to stop lining your pockets,

    Submit a comment

  • Username
    Amanda Campbell
    - January 26, 2013 at 20:30:35

    @jrsplace - Any member of the general public could face huge fines and/or jail time for a breach like this but because its the government we're suppose to blow it off as a mistake? Completely disgusted at some people's ignorance towards this issue.

    Submit a comment

  • Username
    sick of jr s place
    - January 26, 2013 at 18:56:07

    Everbody stop out at jr,s place.....he has all kinds of money..pnp..out by brackley eh joe

    Submit a comment

  • Username
    Derek
    - January 26, 2013 at 12:56:37

    Amanda has said it best over and over these past few weeks. We just want clear answers. Everyone we speak to that is affected by this seems to be getting a different answer when we contact HRSDC. If the information that was provided was consistent, I don't think the backlash would be half as bad as it has been. Just my thoughts.

    Submit a comment

  • Username
    Robert Wyndyck
    - January 26, 2013 at 12:39:47

    In aviation, there is a commonly used rule of thumb known as the 1 in 60 phenomenon. It helps you calculate how far off course you are. What, you may ask, does this have to do with HRSDC losing data on 583,000 student loan borrowers? Simple. 1 in 60 Canadians are affected by this loss directly. If we use a conservative figure of 30%, an estimated 18 of these folks will have family also affected (parents, spouses, dependents) as their info would be included on their loan documents. This brings the number up to 1 in 3. Think about that for a moment. One in three Canadians is in some way affected by this. Whenever you have this many people affected by something, you can bet there will be variance in philosophies on how best to proceed. Most of us want nothing more than the government to acknowledge the severity of this incident, and make a reasonable attempt to provide us assistance in the form of credit monitoring. You know folks, the sad thing is this will do nothing to prevent possible tax fraud or even impersonation resulting in criminal charges. Imagine how you would feel going to bed each night not knowing if some person was using your data to create an identity that was YOU, but with their photo. Imagine that. Now multiply that feeling by every night for the rest of your life. Sound melodramatic? It's meant to on some level. But the fact remains this is serious. My mother always said, if you don't have something nice to say, don't say anything at all. For me that translates to, sure have an opinion. But personal attacks on people is not akin to opinion. It's bullying.

    Submit a comment

  • Username
    Johnkuhn
    - January 26, 2013 at 12:29:38

    Well explained Amanda Thoy, puts it in a light one would never understand from the articles, because I'll admit before reading this, I was skeptical like JRs place. Unfortunately in our society, Amanda, the provision of instant information harms us in more ways than we can imagine. Among them?, people instantly form an opinion and react just as quickly from something as simple as a headline. Reading through it and analyzing information objectively requires time they are not willing to spend. But well done and good luck.

    Submit a comment

  • Username
    Angry Birdwoman
    - January 26, 2013 at 11:54:47

    I can't say I blame any of those whose information IS compromised for being angry. I see that the Canada Revenue Agency is going paperless now too. That means all the information you file with them will be on a computer. Rumor has it that they are going to farm out the storage of any paper files to a private contractor. Now how safe do you fell JRSPlace? Next...medical records? Harper government is out to save taxpayers money, so they say. Well getting rid of jobs that protect Canadians is not a good idea. Getting rid of large numbers of people in government travelling all over the world on various missions when video conferencing would do...now that would save a lot of money.

    Submit a comment

  • Username
    carol
    - January 26, 2013 at 10:06:27

    To the person who said "it's just a mistake, get over it". You and I will do up a legal contract where you give me all your personal information. This includes your birthday (yr, mth, day) your SIN, your contact information, your work information, your fincial information, your spouse/dependant information, you parents information. Then I will break that contract that is legally binding and I will "lose" all that information that you gave me and I have no idea where it is or who has it. Then because I chose to give away your information by mistake you no longer can get any credit because I enabled you to have all of that stolen from you... but I do give you the gift of havig to pay more money every month tha tyou may or may nt have for the rest of your life. According to you it was just a mistake and you should just forgive me and allow me to continue to do this to you and anyone else tha tI feel like ruining the lives of. Who cares about laws right? Who cares about trust right? Who cares about honesty right? Hell... if you feel the government should get away with criminal activity such as this then I should be able to as well... so please do give me all your personal information so we can make this fair for everyone since it's just a little mistake.

    Submit a comment

  • Username
    Wow
    - January 26, 2013 at 09:57:22

    JRSPLACE - The ignorance in your comment baffles me. I bet you'd be singing a different tune if you grasped the severity of this situation. Amanda Thoy broke it down well. We're not greedy, we are just looking to protect ourselves, and our family's futures. You are the one that needs to grow up.

    Submit a comment

  • Username
    What?
    - January 26, 2013 at 09:08:18

    JRSPLACE - Are you kidding me? We have student loans because we decided to further our education, get good jobs and have rewarding careers. Some of us actually have money in the bank or credit cards with substantial limits. We would really like to KEEP that money and those credit cards to ourselves. Grow up? Wow, you really need to think before you speak.

    Submit a comment

  • Username
    James Macgoo Lakeside
    - January 26, 2013 at 08:07:18

    I believe there is a more serious issue concerning students and borrowing. That is, what is the government doing to prevent the students from borrowing more money than they should? Students have their dreams about what a university education will bring them. Upon graduation realities set in for many students. The universities and the lenders align to ebsure loans are available so students get money and immediately turn it over to the schools. The interests of the universities and lenders totally ignore realities that student may never be capable of paying off loan. This is wrong on so many levels and does great damage to students and society. The bill will be coming for these actions and taxpayers should not be responsible. Universities and lenders are not being responsible citizens.

    Submit a comment

  • Username
    John W.A.Curtis
    - January 26, 2013 at 08:01:22

    Nova Scotia Court ruled infavour of demoting a Chief of Police. So fire whoever lost the files. JRSPLACE hasn't got the message we need our young people educated not immigrants.

    Submit a comment

  • Username
    rabid dog
    - January 26, 2013 at 05:16:07

    @jrsplace it was a mistake, and a big one but since i already paid off my loan i don't think thats what i'm looking for. also i'm not looking for the banks to freeze my accounts, delay my mortgage application or prevent me from getting a line of credit which is what the extra protection will result in. just as a suggestion, since it doesn't affect you, keep quiet and in return i won't make comments on issues concerning you like government funding for gender reassignment.

    Submit a comment

  • Username
    Bill
    - January 26, 2013 at 01:36:42

    Okay, Mr.Jrsplace, it is obvious that you aren't one of those affected. A lot of people now have to live their lives hoping and praying that their identities aren't going to be stolen because of this "accident".

    Submit a comment

  • Username
    don
    - January 26, 2013 at 01:23:29

    i hope the person that lost the info was fired? and jrsplace i agree with you. but i wonder how Diane Finley would react if her info was lost ? and i am sure that Amanda Thoy has NEVER lost anything or ever made a mistake as she must be PERFECT.

    Submit a comment

    • Username
      AmAnda Thoy
      - January 26, 2013 at 10:37:08

      The absurd comments that usually befall this website never seem to surprise me. I am having trouble figuring out how you've pulled from my interviews or my comments that I believe I am perfect. I believe the topic concerned the fact that the federal gov had failed to follow its own department policies and Canadian law. To answer your question no, I have never broken my company's policies, I treat my clients with the utmost respect because I value them, and no I have never broken Canadian privacy law by losing or releasing private information. If a private company did this they would be sued and ultimately close down the doors as people would not trust them with their private information. I as well as the others certainly have the right to ask the government to be responsible and honest when they approach this subject. I also have the legal right to pursue formal compensation, as you put it they just lost the info - the important word in your comment - THEY, not I lost my information.

    • Username
      Kristen
      - January 26, 2013 at 11:05:35

      To don and jrs place, I see you both have something in common you both have your heads so far up your a$& and you think an I'm sorry is good enough! Do you both not realize what it means to have your personal info lost and it falling into the wrong hands? Oh yeah I forgot you probably do your one of many islanders who sit back and think we are all about getting money and having them pay our loans out! Well that's not what we want , we want answer to why the government lost our private personal info and we want the protection that we deserve. And to don yes I bet Amanda thoy has made mistakes, but I can garuntee you she has never came as bad as losing 583,000 people's personal information that will affect there whole life.

    • Username
      Brittenay
      - January 26, 2013 at 13:21:51

      Don- the point is not whether or not Amanda has ever lost anything, she is not the one on trial, and whether she has or not, the point is that the information that was lost should have NEVER been on that hard drive to begin with, let alone being on that hard drive unencrypted. Jrsplace- do I wish my loan would just disappear, yes, does that mean I will no longer continue to pay it, no. I have been paying it back every two weeks for the last year and a half, and will continue to do so, regardless of this situation. The fact that you are basically calling us greedy is rude and unfounded. Obviously your information was not one of the 583,000 lost, because if you had any idea what kind of turmoil we are feeling you would never have made that comment in the first place. I would never wish this situation on my worst enemy.

  • Username
    JRSPLACE
    - January 25, 2013 at 23:50:41

    the students who are affected by this should grow up and stop demanding more...it was a mistake...we all make mistakes so deal with it....all you guys want is your loans paid off!

    Submit a comment

    • Username
      Joe Smith
      - January 26, 2013 at 03:27:02

      Yeah, you got a point jrsplace, why should the federal government obey the law and not do dumb stuff like keeping unencrypted personal data on an external hard-drive that can easily be lost or stolen, those greedy students *eyes roll out of sockets*

    • Username
      Shawn
      - January 26, 2013 at 09:39:59

      A mistake? Are you kidding me? My personal information is leaked and it could ruin my financial records as well as my identity could be stolen. This is not a little issue. The government messed up big time and should be held accountable.

    • Username
      Amanda Thoy
      - January 26, 2013 at 09:40:02

      Jrs place, it is quite obvious you do not understand finance or the severity of this issue. What Ryan didn't note in my interview is that this so called service the gov is graciously paying for is ALREADY offered for free. Unless you live in Ontario or Manitoba - of which it costs a mere five dollars. More than half of the affected live outside these provinces. The gov had to change their news release after they got called out for trying to trick Canadians into believing they were actually helping. I myself, as well as thousands of people in the affected group signed up for this service FOR FREE two weeks ago. This the gov is providing nothing for free nor are they paying for any service for islanders affected. I want to clarify the severity of this issue to you. I didn't ask to have my financial identity lost or stolen, the gov did that all on its own. For the rest of my life I now have to pay out of pocket 14.95 twice a month to both credit reporting agencies to see if anyone has used my SIN NUMBER (which is only one part of my personal info that this office lost) has applied for credit in my name. If I do not do this and my credit is compromised, my credit will be ruined. I will also be left to pay off the balance. If your bank accidentally lost your paperwork and that file had your bank account number, the balances in your account, your birthdate, address, and sin within it, notified you two months after the fact that they lost it and couldnt say whether it was stolen or lost i am sure you would be both angry and worried that someone steal money from your account or open credit cards etc in your name. now how would you feel if they apologized and asked you to leave the bank, refused to answer your calls and when you put up a fuss offered to dial equifaxes phone number for you so you could sign up for a free credit alert. somehow i highly doubt that you would find this treatment and resolution a acceptable.Now I am unsure as to why you suggest that I as well as the other 583000 Canadians should grow up and stop demanding more, maybe you could clarify to myself and those people why we should be left to pay for the governments mistake. This so called gov has done nothing to help protect the people they compromised, they have proven that by hiding the fact they lost information, having it on a removable hard drive and leaving us to figure out how to protect ourselves. I refuse to be brushed under the rug by some big shot in Ontario and I will continue to demand fair compensation until this matter is settled. If you have a problem with tax dollars being spent on this then start writing emails to your local mp about how we can ensure that the federal conservatives cannot do this to more Canadians. I feel you are going to get many more replies on your ignorant comment.

    • Username
      Paula
      - January 26, 2013 at 10:37:49

      JRSPLACE, yes I do want my loan cleared...because THEY broke the contract. Yes, I was credit monitoring...because THEY lost my info. No one asked for their information to be leaked but now we have to deal with it. The least THEY can do is take some responsibility. Also, the people who have their loans all paid up, they are pissed too. Knowing your private information is not secure is a serious matter.

    • Username
      lauren
      - January 26, 2013 at 12:47:38

      A mistake?? HmM how does one define a mistake, well i define a mistake as well maybe having one too many glasses of wine and regretting it the next day, or maybe forgetting to wear my winter coat when its -30 outside...but to place people SIN names, addresses, loan amounts, phone numbers and other various bit of information on an unencrypted removable harddrive and then losing it. So that anybody could have it and access thjat infoamtion and use it to steal the identity of anyone of those 583000 tax paying individuals a little more than a mistake...and then to report to the news they are paying for our credit monitoring is outrageous because its free for all provinces except 2 and its 5 dollars for which most of us have already paid!

    • Username
      amanda thoy
      - January 26, 2013 at 16:19:10

      @jrsplace please listen to my interview i gave cbc radio this week. I believe you can hear me saying that i have no wants or intentions to have my loan paid off as it may result in the student loan program being shut down. I would never want someone else who needs this service to not have access to it. http://www.cbc.ca/player/Radio/Local+Shows/Maritimes/ID/2328245466/?page=2&sort=MostRecent

    • Username
      Cheryl Thorne
      - January 26, 2013 at 18:27:24

      JRSPLACE ........ let's just say that you work for the government. Let's also say that you put close to 600 000 SIN on a USB and put it in your pocket. You lose it by some random act. Would you honestly look at those 600 000 people and think a simple "I'm sorry" will make your lack of responsibility okay? That we should just turn away and say "OH heck! It's okay son. We all make mistakes." Give you a slap on the back and invite you for a beer at the local pub. Meanwhile some criminal is using our SIN to create their own identity, rack up credit using our names and God knows what else. But it's okay because "we all make mistakes." Put 'er there son. While you're at it invite the criminal who used our SIN for a beer will ya? OH hell, just invite every criminal out ....... because "we all make mistakes" Deal with it. Someone give this guy a reality check.

    • Username
      Courteney
      - January 26, 2013 at 21:22:26

      @Jrsplace Wow - I have my loans paid off actually. The Government has messed up BIG time and this is not okay.. I'm not looking for money, I want peace of mind that I'm not having my identity stolen because of someone else's carelessness. YOU are the one here who needs to grow up.

Submit a comment

Submit a comment (we keep all emails private)
Agreement

We ask that users remain courteous. You may not post insulting, discriminatory or inappropriate content, which may be removed at our discretion. We are not responsible for user content and opinions. Use of this site as well as content submission & ownership are governed by our Conditions of Use and Privacy Policy.

Member organizations should be non-profit in nature, and promote legal activities. Any organization found promoting illegal activities or commercial products or services will be deleted from the site.

I agree with these conditions.

Advertising

Newsletter

Please enter your email to receive our free newsletter

Subscribe to news alerts
loading...

Expert bloggers

Ride for Heart
Blogger
Heart and Stroke Foundation
Let's go ride a bike
[Sponsored]

More bloggers here

The Guardian Twitter

Advertising