A women walks past the new rebranding sign of Freedom Mobile in Toronto on Thursday, November 24, 2016. Freedom Mobile says about 15,000 customers were affected by a security breach in a new system before the problem was fixed on April 23. THE CANADIAN PRESS/Nathan Denette

A women walks past the new rebranding sign of Freedom Mobile in Toronto on Thursday, November 24, 2016. Freedom Mobile says about 15,000 customers were affected by a security breach in a new system before the problem was fixed on April 23. THE CANADIAN PRESS/Nathan Denette

Freedom Mobile hit by data breach, company says up to 15,000 customers affected

It said the breach affected customers at 17 retail stores who opened or changed accounts

Freedom Mobile confirmed Tuesday it had a data security breach from late March to late April, but the wireless carrier said only about 15,000 customers were affected — far fewer than an outside research firm’s estimate.

The Calgary-based company — which operates networks in Ontario, Alberta and British Columbia — was apparently warned of the breach by researchers at vpnMentor, which announced it to the press.

The vpnMentor report said two of its researchers, Noam Rotem and Ran Locar, had warned Freedom of their findings on April 17, 18 and 23 but didn’t get a response from the company until April 24.

“For ethical reasons, we didn’t download the database, so we don’t know exactly how many people were affected,” the blog said.

However, the blog was posted under the title “Report: Freedom Mobile Customer Data Breach Exposes 1.5 Million Customers” based on the assumption that hackers could access unencrypted data from all of Freedom’s customer base.

Freedom said in an emailed statement that “any reference to 1.5 million customers affected is inaccurate … “

The company said its investigation determined the breach began on March 25 and affected data processed by a new external third-party vendor, Apptium Technologies, that had been hired to streamline its retail customer support.

“The internal systems of Freedom Mobile or (parent) Shaw Communications were not compromised as part of this third-party vendor security exposure,” the company said in a statement.

It said the breach affected customers at 17 retail stores who opened or changed accounts as late as April 15 or made changes to opened accounts on April 16. It said the problem was fixed by April 23.

Freedom also said that it had found no evidence, as of Tuesday, that any data has been misused “and we are conducting a full forensic investigation to determine the full scope of impact.”

Valerie Lawton, of the federal privacy commissioner’s office, said in an email that it had received a breach report related to Freedom Mobile late Monday afternoon.

“Canada’s federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), includes confidentiality provisions and we don’t have further details to offer at this time,” Lawton said.

Under PIPEDA, which was most recently updated in November, private-sector organizations that control personal information must advise the privacy watchdog of breaches that pose a “real risk of significant harm” to individuals.

They must also notify affected individuals about the breaches and keep records.

READ MORE: Personal data of 34,000 medical marijuana patients accessed in data breach

READ MORE: 50 million Facebook accounts affected by security breach

However, the Canadian law — in contrast to the European Union’s year-old General Data Protection Regulation — provides more flexibility about when organizations inform the Office of the Privacy Commissioner.

Asked why it didn’t disclose close the leak sooner, the company said it took time to verify the legitimacy of the warning and verify details with its third-party vendor.

David Paddon, The Canadian Press


Like us on Facebook and follow us on Twitter.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Toronto Public Health nurse Lalaine Agarin makes preparations at Toronto’s mass vaccination clinic, Jan. 17, 2021. THE CANADIAN PRESS/Frank Gunn
3 deaths, 234 new cases of COVID-19 in Interior Health over the weekend

One death connected to outbreak at Kamloops’ Royal Inland Hospital, where 20 patients and 28 staff have tested positive

The Williams Lake Seniors Village. (Angie Mindus file photo - Williams Lake Tribune)
COVID-19 outbreak declared over at Williams Lake Seniors Village: Interior Health

IH credited the good work of staff in keeping the outbreak from spreading

Brent and Craig Lelleau of Lebleau Brothers Logging star in Mud Mountain Haulers on Discovery Canada. (Photo submitted)
Mud Mountain Haulers shine light on forest industry

New TV show, featuring Lebeau Brothers Logging and shot in the Cariboo, premieres tonight.

The driver of this truck received minor injuries after it careened off the highway. (Quesnel RCMP Photo)
Semi-truck crashes down 200-foot embankment off Highway 97

The truck also spilled diesel fuel into Cuisson Creek

Crews with Discovery Channel film as an Aggressive Towing driver moves a Grumman S2F Tracker aircraft around a 90-degree turn from its compound and onto the road on Saturday, Jan. 23, 2021. It was the “most difficult” part of the move for the airplane, one organizer said. (Jenna Hauck/ Chilliwack Progress)
VIDEO: Vintage military plane gets towed from Chilliwack to Greater Victoria

Grumman CP-121 Tracker’s eventual home the British Columbia Aviation Museum on Vancouver Island

Kamloops This Week.
48 COVID-19 cases and one death associated with outbreak at Kamloops hospital

One of the 20 patients infected has died, meanwhile 28 staff with COVID-19 are isolating at home

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Rolling seven-day average of cases by B.C. health authority to Jan. 21. Fraser Health in purple, Vancouver Coastal red, Interior Health orange, Northern Health green and Vancouver Island blue. (B.C. Centre for Disease Control)
2nd COVID vaccine doses on hold as B.C. delivery delayed again

New COVID-19 cases slowing in Fraser Health region

Provincial health officer Dr. Bonnie Henry talk about the next steps in B.C.’s COVID-19 Immunization Plan during a press conference at Legislature in Victoria, B.C., on Friday, January 22, 2021. Two more cases of the COVID-19 strain first identified in South Africa have been diagnosed in British Columbia, bringing the total to three as of Jan. 16.THE CANADIAN PRESS/Chad Hipolito
B.C. now has three cases of South African COVID-19 variant, six of U.K. strain

Both variants are thought to spread faster than earlier strains

Rodney and Ekaterina Baker in an undated photo from social media. The couple has been ticketed and charged under the Yukon’s <em>Civil Emergency Measures Act</em> for breaking isolation requirements in order to sneak into a vaccine clinic and receive Moderna vaccine doses in Beaver Creek. (Facebook/Submitted)
Great Canadian Gaming CEO resigns after being accused of sneaking into Yukon for vaccine

Rod Baker and Ekaterina Baker were charged with two CEMA violations each

Police discovered a makeshift nightclub in a Vancouver apartment on Jan. 23, 2021, and say it wasn’t the first time this month officers have been called to the unit over social gathering concerns. (Phil McLachlan - Capital News)
Doorman of makeshift ‘booze-can’ in Vancouver apartment fined; police look to court order

This marks the fourth complaint about social gatherings inside the apartment in January

A Kelowna couple welcomed their Nooner baby in December. (Flytographer)
Kelowna couple welcomes baby girl from Hotel Zed Nooner campaign

Nicole and Alex will now have 18 years of free stays at the hotel

Kyrell Sopotyk was drafted by the Kamloops Blazers in 2016 and played two seasons with the Western Hockey League club. (Photograph By ALLEN DOUGLAS/KTW)
Kamloops Blazer paralyzed in snowboarding accident sparks fundraiser for family

As of Jan. 24, more than $68,000 had been raised to help Kamloops Blazers’ forward Kyrell Sopotyk

Most Read