July 2021 Privacy Breach Update

We would like to apologize for the 2021 privacy breach that created a vulnerability which may have allowed access to some elements of customers’ personal information. We take our responsibility for handling and managing the personal information of our customers seriously. Protecting access to our systems, and the safety and security of your personal information is a top priority.

A thorough investigation was conducted in collaboration with The City of Calgary and two third-party cyber security experts to determine the extent of the incident and understand what personal information may have been accessible. Findings from the investigation indicated the personal information for CPA customers that was at risk of being accessed during the incident included elements of: names, emails, usernames, addresses, license plate numbers, and parking tag numbers of CPA customers. This information was not organized and would be difficult to extract the personal information and match the different data elements.

There were no dates of birth or driver’s license information on the affected server.

Since the incident, we have worked closely with our partners to strengthen our cyber security protections against illegal activity and mitigate incidents of a similar nature from occurring in the future. We have also obtained a Cyber Secure Canada Certification.

Since implementing the security measures, there has been no evidence of further disclosure or misuse of the personal information that was accessible. Based on efforts undertaken by our cyber security team and partners, it is believed the risk of further disclosure is low. We will continue to monitor the situation closely.

We sincerely appreciate your understanding and regret any distress that this incident may cause. 

 

Frequently Asked Questions

Click here for the most common questions.

To protect yourself from cyber threats in general:

• Change your password regularly. Do not use easily guessed passwords. Do not use the same passwords for multiple accounts.
• Monitor your accounts and report suspicious activity.
• Be vigilant against third parties attempting to gather information by deception (known as “phishing”), including links to fake websites.
• More information on scams and fraud can be found at: Scams and fraud - Canada.ca

A report has been filed with Office of the Information and Privacy Commissioner (OIPC) of Alberta of this unauthorized disclosure of personal information. 

Should you wish to file a complaint with the OIPC, call (403) 297-2728 if in Calgary or 1-888-878-4044. Alternatively visit www.oipc.ab.ca.

Questions?

For general inquiries on the investigation, contact us at ReportCyberSec@CalgaryParking.com.

For concerns regarding the exposed personal information, contact Access and Privacy at FOIP@calgary.ca.