A women walks past the new rebranding sign of Freedom Mobile in Toronto on Thursday, November 24, 2016. Freedom Mobile says about 15,000 customers were affected by a security breach in a new system before the problem was fixed on April 23. THE CANADIAN PRESS/Nathan Denette

Freedom Mobile hit by data breach, company says up to 15,000 customers affected

It said the breach affected customers at 17 retail stores who opened or changed accounts

Freedom Mobile confirmed Tuesday it had a data security breach from late March to late April, but the wireless carrier said only about 15,000 customers were affected — far fewer than an outside research firm’s estimate.

The Calgary-based company — which operates networks in Ontario, Alberta and British Columbia — was apparently warned of the breach by researchers at vpnMentor, which announced it to the press.

The vpnMentor report said two of its researchers, Noam Rotem and Ran Locar, had warned Freedom of their findings on April 17, 18 and 23 but didn’t get a response from the company until April 24.

“For ethical reasons, we didn’t download the database, so we don’t know exactly how many people were affected,” the blog said.

However, the blog was posted under the title “Report: Freedom Mobile Customer Data Breach Exposes 1.5 Million Customers” based on the assumption that hackers could access unencrypted data from all of Freedom’s customer base.

Freedom said in an emailed statement that “any reference to 1.5 million customers affected is inaccurate … “

The company said its investigation determined the breach began on March 25 and affected data processed by a new external third-party vendor, Apptium Technologies, that had been hired to streamline its retail customer support.

“The internal systems of Freedom Mobile or (parent) Shaw Communications were not compromised as part of this third-party vendor security exposure,” the company said in a statement.

It said the breach affected customers at 17 retail stores who opened or changed accounts as late as April 15 or made changes to opened accounts on April 16. It said the problem was fixed by April 23.

Freedom also said that it had found no evidence, as of Tuesday, that any data has been misused “and we are conducting a full forensic investigation to determine the full scope of impact.”

Valerie Lawton, of the federal privacy commissioner’s office, said in an email that it had received a breach report related to Freedom Mobile late Monday afternoon.

“Canada’s federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), includes confidentiality provisions and we don’t have further details to offer at this time,” Lawton said.

Under PIPEDA, which was most recently updated in November, private-sector organizations that control personal information must advise the privacy watchdog of breaches that pose a “real risk of significant harm” to individuals.

They must also notify affected individuals about the breaches and keep records.

READ MORE: Personal data of 34,000 medical marijuana patients accessed in data breach

READ MORE: 50 million Facebook accounts affected by security breach

However, the Canadian law — in contrast to the European Union’s year-old General Data Protection Regulation — provides more flexibility about when organizations inform the Office of the Privacy Commissioner.

Asked why it didn’t disclose close the leak sooner, the company said it took time to verify the legitimacy of the warning and verify details with its third-party vendor.

David Paddon, The Canadian Press


Like us on Facebook and follow us on Twitter.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Alberta children whose only symptom of COVID-19 is a runny nose or a sore throat will no longer require mandatory isolation, starting Monday.
477 new COVID-19 cases confirmed in Alberta on Thursday

Changes being made to the COVID-19 symptom list for school-age children

Three young Sylvan Lake residents are asking for lights to be added to the walking trail system to make them safer and less scary at night. Photo by @workinonmyfitness72
Young Sylvan Lake residents ask for lights to be added to walking trails

Three young Sylvan Lake residents appeared before Council recently to present their ask

Agriculture Minister Devin Dreeshen (Alberta government photo)
Town of Sylvan Lake recieves funding to help with COVID-19 related revenue losses

Minister Devin Dreeshen says the funding will help the Town pay staff and provide services

There were 410 COVID-19 cases recorded in Alberta Wednesday. (File photo by The Associated Press)
Alberta records 410 new COVID-19 cases Wednesday

Central zone dropped to 160 active cases

Shaun Isaac, owner of Woodchucker Firewood in Trochu, is awaiting a new shipment during a firewood shortage in the province. All of the wood he has left is being saved for long-time customers who need it to heat their homes. (Contributed photo).
Firewood shortage in central Alberta caused by rising demand, gaps in supply

‘I’ve said “No” to more people than ever’: firewood seller

Pilots Ilona Carter and Jim Gray of iRecover Treatment Centres, in front of his company’s aircraft, based at Ponoka’s airport. (Perry Wilson/Submitted)
95-year-old Ilona Carter flies again

Takes to the skies over Ponoka

Children’s backpacks and shoes are seen at a daycare in Langley, B.C., on Tuesday May 29, 2018. Alberta Children’s Services Minister Rebecca Schulz says the province plans to bring in a new way of licensing and monitoring child-care facilities. THE CANADIAN PRESS/Darryl Dyck
Alberta proposes legislation to change rules on child-care spaces

Record-keeping, traditionally done on paper, would be allowed digitally

Prime Minister Justin Trudeau shakes hands with US Vice-President Joe Biden on Parliament Hill in Ottawa on Friday, December 9, 2016. THE CANADIAN PRESS/ Patrick Doyle
A Biden presidency could mean good news for Canadian environment policy: observers

Experts and observers say even a U.S. outside the Paris agreement may ultimately end up in the same place

People take a photo together during the opening night of Christmas Lights Across Canada, in Ottawa, on Wednesday, Dec. 4, 2019. The likelihood that most Canadians will enjoy a holly jolly Christmas season of gatherings, caroling and travel is unlikely, say public health experts who encourage those who revel in holiday traditions to accept more sacrifices ahead. THE CANADIAN PRESS/Justin Tang
Ho, ho, no: Experts advise preparing for a scaled-back COVID holiday season

Many of the holiday season’s highlights have already been scrapped or are unlikely to take place

Sen. Kim Pate is shown in Toronto in an October 15, 2013, file photo. The parliamentary budget office says a proposed law that would give judges discretion on whether to apply a lesser sentence for murder could save the federal government $8.3 million per year. THE CANADIAN PRESS/Colin Perkel
Judicial discretion for mandatory minimum sentences for murder would save $8.3M: PBO

The result would be fewer people in long-term custody at federal correctional institutions, experts say

Husky Energy logo is shown at the company’s annual meeting in Calgary on May 5, 2017. THE CANADIAN PRESS/Jeff McIntosh
Husky pipeline spills 900,000 litres of produced water in northwestern Alberta

The energy regulator says environmental contractors are at the site

A raccoon paid a visit to a Toronto Tim Hortons on Oct. 22, 2020. (shecallsmedrew/Twitter)
Who are you calling a trash panda? Raccoon takes a shift at Toronto Tim Hortons

Tim Hortons said animal control was called as soon they saw the surprise visitor

Most Read