The province mentioned the incident occurred on Jan. 7 when an e mail concerning Hunter Harvest surveys was despatched to HAL prospects from a third-party company referred to as Aspira.
Aspira despatched an e mail that contained the client identify and HAL account identification quantity to about 33,000 e mail addresses.
“The e-mail was individually addressed — by identify — and the error resulted within the e mail recipient not essentially matching the particular person to whom the e-mail was meant,” the province informed International Information in an emailed assertion on Tuesday.
“This problem was attributable to human error at Aspira. The system was not hacked or breached in any approach. An individual’s net account can’t be accessed with simply their identify and HAL quantity, as net accounts are password protected.”
The province knowledgeable the workplace of the privateness commissioner on Jan. 8.
Although privateness commissioner Ron Kruzeniski mentioned he can’t touch upon the specifics of the investigation, he mentioned it’s at all times an excellent factor to sort out a lot of these points head on.
“An important a part of all of our investigations is making suggestions for change sooner or later. As soon as a breach happens, you may’t do a lot about it,” Kruzeniski mentioned.
“You understand, it’s an outdated prairie expression. It’s closing the barn door after the horse is out, however what you are able to do is put in some issues that can cut back the dangers of it occurring once more.
“I don’t assume you may ever simply forestall it from occurring once more, however you may cut back the dangers.”
The potential breach follows the ransomware assault on eHealth Saskatchewan in 2019-20, which is being referred to as one of many largest privateness breaches within the historical past of the province, and a current breach at Saskatchewan Polytechnic.
“The federal government clearly has a serious drawback on the subject of defending the privateness of the folks of Saskatchewan,” mentioned Erika Ritchie, NDP atmosphere critic.
“Why is the personal data of our province’s hunters within the arms of an American firm as a substitute of being administered by certainly one of our Crown companies?”
The province mentioned that though it’s assured that no private data has been jeopardized as a result of error, each the ministry and Aspira will provide a brand new HAL quantity to any member who needs one.
Saskatchewan eHealth ransomware assault referred to as certainly one of province’s largest privateness breaches
© 2021 International Information, a division of Corus Leisure Inc.