The OCS waited six days to tell the affected customers

gb123

Well-Known Member
The Ontario Cannabis Store discloses a massive information breach through Canada Post
The branch charged with Ontario’s legal cannabis distribution took a huge hit to its information security last Thursday (November 1).

As far as the provincial rollout of legal cannabis goes, Ontario is a mess. After weeks of painstaking delivery delays, lost orders, product shortages, and more than 1,000 formal complaints, Ontarians can now add a hack to the pile of frustrating hiccups to tweet about.


Jose Jones@JoseJon05278496
https://twitter.com/JoseJon05278496/status/1057731577529204738

Ontario Cannabis Store is incompetent. I'm order #86xx , i ordered in the first 30 minutes. Now more than 2 weeks, nothing. No email. Call centre useless. People who ordered after me got delivery... why isnt it first come first served? #ONpoli @ONCannabisStore #OCS

https://twitter.com/intent/like?tweet_id=1057731577529204738
7
3:30 PM - Oct 31, 2018
Twitter Ads info and privacy

See Jose Jones's other Tweets

Twitter Ads info and privacy


The Ontario Cannabis Store (OCS) released a statement via Twitter on Wednesday (November 7) disclosing a hacker accessed approximately 4,500 digital records by way of the Canada Post delivery tracking tool. The Crown corporation functions as the primary postal operator in Canada and, now that cannabis is federally legal, is responsible for delivering weed.


View image on Twitter


Ontario Cannabis Store@ONCannabisStore

https://twitter.com/ONCannabisStore/status/1060222271388827648

The OCS has released the following update:


92

12:27 PM - Nov 7, 2018

253 people are talking about this

Twitter Ads info and privacy


The information obtained included postal codes, deliver dates, tracking numbers, and package signee names. The full delivery address and legal names of the recipient were not included in the stolen information.

image-1.jpg

The OCS says other companies who use the federal delivery corporation were also hacked.
ONTARIO CANNABIS STORE
The affected customers were notified by email on the same day the release went public—six days after the breach.

The release reads: “Upon learning of this incident, the OCS immediately engaged the Office of the Information and Privacy Commissioner (IPC) of Ontario. Since November 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information.”

The release also says the information was “deleted and not further disclosed” and says Canada Post has not yet taken further action.

 
Back
Top