Private info of 300 people breached in municipal phishing attack in North Bay

The names and other personal information of 300 customers were breached in a phishing attack in North Bay on Wednesday.

In a news release, the city said the affected people are being notified about what happened.

“On Wednesday, city officials discovered that an unauthorized party gained access to accounts receivable data through a phishing attack, prompting city staff to immediate action, including efforts to contact affected customers,” the release said.

“The breach exposed approximately 300 customer names and outstanding balances, with no other data compromised.”

According to the cybersecurity firm imperva, a phishing attack involves a fraudster pretending to be a trusted source tricks the recipient of an email into clicking a link.

That “can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive information.”

The attack was reported to the Canadian Anti-Fraud Centre and the city is currently reviewing its data security protocols.

Officials have also informed the Information and Privacy Commissioner of Ontario, in accordance with the Municipal Freedom of Information and Protection of Privacy Act.

• Download the CTV News app now and get local alerts on your device
• Get local breaking news and updates sent to your email inbox

“The city is also advising customers to exercise heightened caution when dealing with unsolicited emails, phone calls, or letters that contain links, attachments, or requests related to city accounts,” the release said.

“The city remains committed to safeguarding the privacy and security of vendors and residents whose information is under its care and control and regrets that this incident occurred.”

Customers who receive any communication they find suspicious should contact the city at 705-474-0400, ext. 2232.