Data Breach Details and What we are Doing
Concordia Students’ Association regrets to inform you that our Health and Dental Provider broker Gallivan experienced a data breach on March 10, 2023 that may have compromised some of our sensitive information. We understand the seriousness of this incident and want to assure you that Gallivan is taking immediate action to address the situation and bolster our student data safeguards for the future.
We’re currently unaware of any ongoing exposure of this information and we’re not aware of it being misused. However, we’re taking a comprehensive and proactive approach by providing information about the incident, our response, and steps you can take to help protect your information.
What’s being done?
Gallivan discontinued using the third-party service and are offering all the students comprehensive Credit Monitoring Service and Identity Theft Restorations as an extra precaution. Additionally, Gallivan reported the incident to the Office of the Privacy Commissioner of Canada, as well as applicable provincial privacy authorities. A communication will be sent by Gallivan to all students regarding the protection services at no cost.
We understand that trust is paramount, and we are committed to earning back the trust you have placed in us. The recent breach serves as a stark reminder of the ever-evolving nature of cyber threats, and we are taking this as an opportunity to reinforce our commitment to data protection.
We encourage you all to remain vigilant and promptly report any suspicious activities or potential security concerns you encounter within the organization.
Our priority is to learn from this unfortunate event, bolster our data safeguards, and emerge stronger and more resilient. We value your continued support and cooperation during this time of heightened security measures.
References
To find out more about your rights to privacy and the protection of your personal
information, as well as the potential for identity theft, we suggest the following references:
Office of the Privacy Commissioner of Canada (OPC), www.priv.gc.ca, 1-800-282- 1376; the OPC website provides links to privacy authorities in the different provinces
and territories
Canadian Anti-Fraud Centre, www.antifraudcentre-centreantifraude.ca, 1-888-495-8501
If you’d like more information about our Privacy Policy or how to contact our Chief Privacy Officer, please visit our website at gallivan.ca/privacy
Frequently asked questions
Why was my information initially required?
This information is used to confirm your enrollment or opt-out status of your student health and wellness program.
Was personal banking or health information included?
No. Only the information noted in this letter was provided to the third-party vendor. No
other information was provided or is at risk.
What should I do if my credit is compromised?
We urge you to sign up for the free credit monitoring services to help identify any
potentially fraudulent use of your information. By registering for credit monitoring services, for the duration of your subscription you are automatically eligible for ID Theft Restoration services provided by CyberScout, a TransUnion company which includes Identity Theft Insurance coverage to protect against potential damages related to identity theft and fraud. If you believe you have been the victim of identity theft or have reason to believe your information is being misused, we urge you to immediately contact the police and file a police report. You can also call the Canadian Anti-Fraud Centre, www.antifraudcentre-centreantifraude.ca, 1-888-495-8501.
If you have any questions, concerns, or suggestions regarding our data security practices, please don't hesitate to reach out to the CSA President at csapresident@student.concordia.ab.ca
Thank you for your understanding and cooperation.
Sincerely,
Abha Sharma
csapresident@student.concordia.ab.ca
