The Saskatchewan Information and Privacy Commissioner released an investigation report into the SLGA Nov. 10, detailing a cyberattack that happened late last year.
A SLGA information technology (IT) employee noticed they were unable to connect to the web server and shortly after, the SLGA received a ransom demand. The attackers claimed that if the ransom was not paid, the attackers would publish data to the media and on the dark web, which is only accessible by special software that allows users and operators to be anonymous and untraceable.
A critical vulnerability sector was left unpatched within the system platform, creating the opportunity for a cyberattack.
The investigation explained that the breach began sometime in November, but the SLGA wasn’t able to detect suspicious activity until Dec. 25.