A women walks past the new rebranding sign of Freedom Mobile in Toronto on Thursday, November 24, 2016. Freedom Mobile says about 15,000 customers were affected by a security breach in a new system before the problem was fixed on April 23. THE CANADIAN PRESS/Nathan Denette

Freedom Mobile hit by data breach, company says up to 15,000 customers affected

It said the breach affected customers at 17 retail stores who opened or changed accounts

Freedom Mobile confirmed Tuesday it had a data security breach from late March to late April, but the wireless carrier said only about 15,000 customers were affected — far fewer than an outside research firm’s estimate.

The Calgary-based company — which operates networks in Ontario, Alberta and British Columbia — was apparently warned of the breach by researchers at vpnMentor, which announced it to the press.

The vpnMentor report said two of its researchers, Noam Rotem and Ran Locar, had warned Freedom of their findings on April 17, 18 and 23 but didn’t get a response from the company until April 24.

“For ethical reasons, we didn’t download the database, so we don’t know exactly how many people were affected,” the blog said.

However, the blog was posted under the title “Report: Freedom Mobile Customer Data Breach Exposes 1.5 Million Customers” based on the assumption that hackers could access unencrypted data from all of Freedom’s customer base.

Freedom said in an emailed statement that “any reference to 1.5 million customers affected is inaccurate … “

The company said its investigation determined the breach began on March 25 and affected data processed by a new external third-party vendor, Apptium Technologies, that had been hired to streamline its retail customer support.

“The internal systems of Freedom Mobile or (parent) Shaw Communications were not compromised as part of this third-party vendor security exposure,” the company said in a statement.

It said the breach affected customers at 17 retail stores who opened or changed accounts as late as April 15 or made changes to opened accounts on April 16. It said the problem was fixed by April 23.

Freedom also said that it had found no evidence, as of Tuesday, that any data has been misused “and we are conducting a full forensic investigation to determine the full scope of impact.”

Valerie Lawton, of the federal privacy commissioner’s office, said in an email that it had received a breach report related to Freedom Mobile late Monday afternoon.

“Canada’s federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), includes confidentiality provisions and we don’t have further details to offer at this time,” Lawton said.

Under PIPEDA, which was most recently updated in November, private-sector organizations that control personal information must advise the privacy watchdog of breaches that pose a “real risk of significant harm” to individuals.

They must also notify affected individuals about the breaches and keep records.

READ MORE: Personal data of 34,000 medical marijuana patients accessed in data breach

READ MORE: 50 million Facebook accounts affected by security breach

However, the Canadian law — in contrast to the European Union’s year-old General Data Protection Regulation — provides more flexibility about when organizations inform the Office of the Privacy Commissioner.

Asked why it didn’t disclose close the leak sooner, the company said it took time to verify the legitimacy of the warning and verify details with its third-party vendor.

David Paddon, The Canadian Press


Like us on Facebook and follow us on Twitter.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Turf replacement installed at Oak Bay High

New Astroturf will be ready for school, sports still cancelled

Driver loses control, crashes into Saanich furniture store

Crash at Lazyboy Furniture store Wednesday afternoon

Mayor steps down from committee overseeing fate of Sidney’s Beacon Wharf

Cliff McNeil-Smith cites work commitments, schedule behind decision

Downtown Victoria’s on-street parking time limits, rates back in effect

City reinstates restrictions, extends reduced rates for parkades and other metered areas

Teachers need more time to prepare for fall reopening, says Greater Victoria Teachers’ Association

GVTA president says class schedules need to be reworked for cohort model

Greater Victoria Crime Stoppers wanted list for the week of Aug. 4

Greater Victoria Crime Stoppers is seeking the public’s help in locating the… Continue reading

POLL: Should it be mandatory to wear masks when out in public?

B.C. is witnessing an alarming rise in the number of cases of… Continue reading

VIDEO: B.C. conservation officers free not-so-wily coyote with head stuck in jar

Poor pup was found with a glass jar stuck on its head in Maple Ridge

‘Do our lives count for less?’: COVID-19 exposes cracks in disability aid

In July, Parliament approved a $600 payment for people with disabilities facing additional expenses during COVID-19

Agreement between province, BC Hydro, First Nation, ends legal fight over Site C

B.C. will work to improve land management and restore traditional place names in areas of cultural significance

Investigators still hoping to solve 2015 homicide of Penelakut Island woman

Tips being sought into Penelakut Island woman’s death five years ago

B.C. doctors, dentists call on province for mandatory mask rule

Open letter says masks should be worn in indoor public spaces, public transportation or in crowds

Dwindling B.C. bamboo supply leaves Calgary Zoo biologists worried about pandas

Zoo has been trying to send pandas back to China since May

Most Read