The Windsor-Essex Children’s Aid Society (WECAS) has confirmed an ongoing investigation into a cyber incident discovered earlier this month. While the extent of potential access to or removal of personal information from its systems has not been determined yet, WECAS took immediate steps upon discovering the incident on August 6 to prevent further breaches and enhance security measures.
In a recent press release, WECAS disclosed that cybersecurity experts have been engaged to manage and probe the incident, ensuring a safe restoration of normal business operations. The organization has also been in contact with the Ministry of Children, Community, and Social Services, as well as law enforcement. Additionally, the Information and Privacy Commissioner of Ontario (IPCO) has been notified about the incident.
According to WECAS, the investigation involves a meticulous examination of potentially impacted systems and data, with a specific focus on whether personal information of employees or service recipients was compromised. As of now, the investigation has not confirmed any unauthorized access or data removal from WECAS’ systems.
Should the investigation reveal any compromise of personal information, WECAS pledges to inform the affected individuals and provide guidance on recommended actions. Despite the cyber incident, all services offered by the agency are operating without disruption, with contingency measures in place to ensure seamless service delivery. However, WECAS mentions that its phone system is partially functional, with callers encouraged to leave messages for prompt callbacks.
WECAS has assured ongoing assessment of the situation and committed to sharing updates as necessary, although specific details regarding the nature of the cyber incident, such as whether it involved ransomware or another form of cyberattack, have not been disclosed. The agency has opted not to provide further information at this time.