City of Regina says internal email account compromised by cyber attackers

City of Regina says internal email account compromised by cyber attackers
City of Regina warns of scam emails from city address
Cyber attackers have apparently struck the City of Regina, compromising an internal email account and using it to send phishing emails.

“The City of Regina recently experienced an internet technology security incident,” the city said in a press release. “Cyber security is a top priority for the City of Regina and we are committed to providing a secure cyber environment to protect our employees and residents.”

The e-mail, sent using the address of a high-ranking city employee, asked recipients to click on a link to a survey.  Those clicking on that link were then asked to provide a password.  The city says if your credentials were entered to that page, whoever is responsible now has your e-mail address and password.

Warning issued by city of Regina after scam e-mail delivered

The attack took place on Tuesday, according to the release. The phishing emails contained the subject line E-Reminder for ((PO-D201719) and were sent to other City of Regina staff, as well as external organizations and groups.

The statement from the city says the Office of the Privacy Commissioner has been informed about this breach and that to their knowledge, they are not aware of any city data being compromised as a result of this and that at this time, it appears as if only one e-mail was affected.

Phishing is usually defined as a fraudulent attempt to obtain sensitive or confidential information by disguising a request, making it appear to come from a trustworthy source.

The city has notified the Office of the Privacy Commissioner, who is tasked with investigating privacy breaches.

“We are not aware of any City data being inappropriately accessed other than the one email address list of a single City staff member at this time,” said the release.

The City of Regina is warning employees and others about the potential of a scam email sent from a city email address.

In a news release, a city spokesperson says an internal email account was compromised earlier this week. That account sent what is known as a phishing scam.

The scam email, sent from the compromised city of Regina email address, asked recipients to click on a link to a survey. That website then asked for a password.

The city says it doesn't know of any stolen data yet beyond the one hacked email, but it is asking people who've received the email to ignore it.

The city says it has informed the Office of the Privacy Commissioner, but said in a statement it is "not aware of any city data being inappropriately accessed other than the one email address list of a single city staff member at this time."

It is a priority for CBC to create a website that is accessible to all Canadians including people with visual, hearing, motor and cognitive challenges.