What we know, what we don’t know, and questions from a cyber security professional

NOTE: We will update this post as more information comes to light

Yesterday’s news that the Town of Huntsville, working alongside experts, is investigating a cybersecurity incident that occurred over the weekend has left several questions unanswered.

Questions that our friend who works in cyber security has sent to his ward councilor (Monty Clouthier) to pass along to his colleagues and town staff.

In the email, sent late Monday, my friend addressed several issues including asking the question: “As a concerned citizen, could you please tell me the extent of the breach, what systems were affected, what data was compromised and what the plan is to bring the Town’s systems back online and safely?”

Rather than wait for that to happen, I also sent a few of the pertinent questions based on my friends’ email to a pair of council members and a staff member at the town.

In terms of the security breach, has the Town followed the appropriate measures in terms of reporting it to the police/Canadian Centre for Cyber Security? 

When exactly was the breach found and how did it happen? (This is not to place blame, but I want to warn people if it happened via an email link or another user-error situation that can be a teaching opportunity).

There was a cybersecurity attack in Hamilton this year, are the two attacks related?  In Hamilton it is rumored the tax system was compromised.  Is this the case in Huntsville?  At a minimum, if they haven’t already, IT should be involving CCCS and reporting the breach: https://www.cyber.gc.ca/en/incident-management

While we await the answers to those questions, let’s get into what we know according to the news release from the Town.

• The incident occurred over the weekend and the network is secured against more unauthorized activity.
• So far there no evidence exists to indicate that a compromise of sensitive data, such as personal information, has occurred. However, the Town indicates that if this is discovered the appropriate steps will be taken.
• Town Hall will remain closed to the public on Tuesday, March 12, 2024. The Canada Summit Centre is open; camp and town programming is operating at that facility. The Algonquin Theatre day camp will also operate. The Library will reopen on March 12 to the public and programs will be available.
• The Municipality has taken precautionary measures, which has impacted some of our systems and online services, including some municipal and Council email addresses. Customer service representatives are available by phone at 705-789-1751.
• The Regular Planning Committee Meeting on March 13 and the Special Council Meeting on March 13, have been cancelled and will be rescheduled. The Library Board Meeting Scheduled on March 12 has been cancelled and rescheduled for March 26, 2024.

According to the news release, “The Town is committed to being as transparent as possible regarding this incident and its implications for our community. This type of incident takes time to investigate, and we would like to thank the community for their patience.”

As well, the Town says that regular updates will be provided regarding this incident, the impact to Town services, and any interim measures being implemented. 

Hopefully if mine and my friend’s questions are addressed, the answers will provide the necessary answers to keep our community informed as they should be.