https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
https://ici.radio-canada.ca/nouvelle/2001279/incident-securi...
The Ministère de la Cybersécurité et du Numérique du Québec confirmed on Thursday that an incident of computer security due to an action by an employee was quickly corrected.
This employee has been transferred to une boîte de courriel personale des documents contenant des renseignements personnels de 529 employés de la fonction publique. Elle aurait agi de bonne foi et a collaboré avec le ministère, a indicé ce dernier en réponse aux questions de Radio-Canada.
The incident occurred on May 23 last year, when the employee was transferred to another public organization. She explained that she had transferred documents to be able to answer the questions of her replacement in order to facilitate the transition.
The ministry specified that the employee had access to this information in the framework of his duties.
Even if the intention of the employee was not to use the information for an illegal purpose, this practice contravenes the rules of safety in place intended for the personnel of MCN, the ministry emphasized in its email to Radio-Canada.
Par ailleurs, the ministère indicated that a complaint had been filed with the police so that an inquiry could be opened.
The employee was also sanctioned for not respecting the rules of the ministry, which ensured the destruction of the information transferred to the personal email box.
The Information Access Commission was also informed of the incident.
Former HR employee (compensation) exfiltrated data to their personal email address. data included first and last name , SIN numbers of ministry employees. No evidence of wrongdoing yet but it raises questions of gross incompetence coming from the ministry in charge of preventing data loss.
HR had laptops with employee data on it stolen 3 times in two years. Each time they had left the laptop in their car after work when they went out to eat.
That, among other things is my long sad experience with HR.
It’s always some rando in a department / job where the rules don’t matter it seems.
Many processes on the payroll vendor's side and our company were changed after that day.
Unless you are referring to tech in particular, that seems very harsh. The ministry of digital transformation is a shitshow, but the governement itself has not done anything that would warrant the label "grossly incompetent".
