The PII of at least 51,400, and possibly as many as 360,000 educators, in Quebec Province was exposed when a malicious actor obtained login credentials to the Ministère de l’Éducation et de l’Enseignement supérieur network.

The ministry
received confirmation of the breach on February 19 noting in a statement that a
single database was accessed that contained the Social Insurance Number, last
name, first name, date of birth of full-time and those substitute teachers who completed
a contract of 20 days or more. The data base that was compromised contained
51,400 names, but the ministry is informing all 360,000 of its educators out of
an abundance of caution.

“The 360 000
people in the database in question will receive a letter indicating the
procedure to follow to contact a credit monitoring company. The government will
assume all costs related to the protection of people who are not already
covered,” the ministry
said.

The ministry
did not reveal when the attack took place but did say that so far about 400
teachers reported their identities have been stolen.

Letters are
being sent to all 360,000 potential victims and the ministry will pay for
credit monitoring and a hot line has been established (1 877 644‑4545). However, those who have incurred losses due to the
data breach will not be reimbursed by the government, instead the ministry suggested
they resort to using the common law courts.