CBC News reports:
The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee information.
According to an internal email obtained by CBC News, the House of Commons alerted staff on Monday that there was an information breach. It said a malicious actor was able to exploit a recent Microsoft vulnerability to gain unauthorized access to a database containing information used to manage computers and mobile devices.
Some of the information obtained by the hacker is not available to the public, according to the email. That includes employees’ names, job titles, office locations and email addresses, as well as information regarding their House of Commons-managed computers and mobile devices.
Read more at CBC News.
At this point, no threat actor or group has claimed responsibility for the attack and the motivation for the attack is not yet clear.
