OTTAWA—An internal review has uncovered weak security practices when it comes to information technology at Public Safety Canada—from lax controls on the use of portable flash drives to inadequate awareness and training.
The review found employees who were no longer with the department “still had privileged access to the network” and that some current employees had unnecessary administrative access to “mission critical applications.”
A “sophisticated hacking group” backed by the Russian government reportedly infiltrated the Department of Treasury’s systems and stole information related to internet and telecommunications policymaking as part of a broader campaign that also hacked the Commerce Department and other government agencies.
The FBI is investigating the attacks and is looking into the Russian hacking group APT29, also known as Cozy Bear, as a potential culprit, according to the Washington Post. The foreign-backed hack was first reported by Reuters.
As a result of the hack, the National Security Council held a meeting at the White House on Sunday.
