Criminals offered stolen RCMP informant data for sale
The Royal Canadian Mounted Police (RCMP) lost a USB drive containing sensitive personal information, which was later found to be offered for sale by criminals. This breach has raised serious concerns about data security. The lost USB key held data on 1,741 individuals, including victims, witnesses, informants, and police personnel. The device was unencrypted and lacked password protection, leading to a privacy violation under the Privacy Act. The Privacy Commissioner's office has recommended stricter security measures for USB devices, including audits and training. The RCMP has agreed to the recommendations but has not set a timeline for implementation.