The security incident: The Town of Westlock confirmed Friday that a cybersecurity breach exposed personal information for 1,633 residents and businesses earlier this year. The data breach affected individuals using pre-authorized payment plans and electronic funds transfers.
What happened:
- On January 31, 2024, unauthorized access was detected in a portion of the town’s IT infrastructure.
- Simone Wiley, Westlock’s chief administrative officer, stated that the town acted immediately to secure the network, engaging third-party cybersecurity experts for remediation and forensic investigation.
- Impacted individuals were notified and offered credit monitoring and identity protection services.
Why it matters: Small towns like Westlock often lack robust cybersecurity infrastructure, leaving sensitive data vulnerable. This incident highlights the increasing threat of cyberattacks targeting local governments.
What they’re saying:
- “We acted immediately to secure our network and data from further unauthorized activity,” said Wiley in a statement.
- The town also reported the breach to Alberta’s Privacy Commissioner and delayed public disclosure until the investigation was complete.
- “We worked as quickly as possible to notify those impacted after determining the scope of the compromised data,” added spokesperson Debbie Mottus.
The backdrop:
- Located 90 kilometers northwest of Edmonton, Westlock has a population of 4,802 (2022).
- This breach follows a growing trend of cyberattacks targeting municipalities, emphasizing the need for stronger defenses in public IT systems.
What you can do to safeguard your assets:
- Use multi-factor authentication (MFA): Add an extra layer of protection to critical systems to prevent unauthorized access.
- Monitor financial and personal accounts regularly: Keep a close watch on your accounts for any unusual activity.
- Develop a cybersecurity incident response plan: Outline steps to contain and recover from breaches to minimize damage.
Organizations like Guardka Security offer comprehensive cybersecurity solutions and proactive monitoring services to help municipalities and businesses strengthen their defenses against evolving threats.