Zoom suffered a credential stuffing attack. In this type of attack, stolen account credentials, typically consisting of lists of usernames and/or email addresses and the corresponding passwords (often from a previous data breach) or slight variations of these passwords, are used to gain unauthorized access to user accounts through large-scale automated login requests directed against a web application.

Diane McLeod-McKay provides guidance in regard to protecting personal information while using these applications

The Yukon Ombudsman, Information and Privacy Commissioner, and Public Interest Disclosure Commissioner is taking a number of steps to respond to evolving circumstances related to COVID-19.

The Yukon Information and Privacy Commissioner is marking Data Privacy Day with the release of a new document that gives information and guidance about ransomware

The Yukon IPC has found that the Department of Health and Social Services violated HIPMA when it failed to exercise discretion before using the personal health information of a patient

The IPC has issued a consideration report after a Yukoner complained about the length of time it took for the Health and Social Services to respond to a request for access to the complainant’s own personal health information

Yukon Information and Privacy Commissioner is working to inform individuals and health care providers in the territory about the breach

Information and Privacy Ombudspersons and Commissioners from across Canada are urging their governments to modernize access to information and privacy laws

The Information and Privacy Commissioner for the Yukon has issued an inquiry report that has implications for outfitter hunting guides and other businesses who are required by law to supply information to a public body

IPC decision is based on limited right to refuse to confirm or deny existence of records