Shared Services Canada

The Access to Information and Privacy Protection Division was advised of a security incident related to the loss or improper disposal of a Shared Services Canada (SSC) external storage device. The incident occurred between February 21, 2022, and April 1, 2022.

SSC is unable to clearly determine the specific content of the device, but it may have contained some of your personal information. We take our role in safeguarding personal information very seriously and are informing all individuals who may have been potentially impacted.

Once SSC became aware of the privacy breach, investigations were conducted and recommendations were implemented to reduce the risk of reoccurrence.

Please note that under the Privacy Act you are entitled to register a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) regarding this breach.

If you have any inquiries about this notice or want additional details about the privacy breach occurrence, please do not hesitate to communicate with the manager of M365 EXO Security, Forensics, Administrative Investigations, Insider Threat Monitoring Enterprise IT Security Operations (EITSO), forensicsinvestigations-enquetejudiciaire@ssc-spc.gc.ca. For any inquiries about your personal information, please contact the Deputy Director, Policy and Governance, ATIP, atippg-pgaiprp@ssc-spc.gc.ca.

We apologize for any inconvenience this may cause. Please rest assured that SSC has strict safeguards in place to protect the confidentiality and security of personal information.