Another email reported that internal systems were vulnerable between December 20, 2023 and January 24, 2024. It informed anyone who remotely connected to the x27;using a SIGNET (Secure Integrated Global Network) laptop that his information could be vulnerable.
It is unclear whether any secret information was lost during this breach, which lasted more than a month.
< p class="StyledBodyHtmlParagraph-sc-48221190-4 hnvfyV">A breach of this duration is bound to be serious, says Wesley Wark, a national security expert at the University of Ottawa.
Wesley Wark, national security expert at the University of Ottawa
Global Affairs Canada holds a lot of classified and sensitive information… It's a natural target for hacking.
A quote from Wesley Wark, national security expert at the University of ;Ottawa
Diplomatic cables are sent using an encrypted system, but a source told CBC News that some drafts of sensitive messages and other information may have been stored on the affected drives .
We know this information may be unsettling for many of you, the email sent to staff said. This is an evolving situation and further information and advice will continue to be shared as quickly as possible.
The email offers suggestions on how to protect sensitive information and encourages employees to monitor their bank accounts for unauthorized activity.
In the meantime, some Canada-based Global Affairs employees with security clearance are unable to work from home.
This is not a permanent change to the hybrid work model, but simply a temporary situation until this crisis passes, the email states.
A senior diplomatic source told CBC News that on several occasions over the past year, staff have been asked to immediately change the words password or restart the software.
In a written statement, the department says on-site employee connectivity in Global Affairs Canada buildings is fully functioning, allowing normal access to computers and the network.
According to Global Affairs, employees working remotely in the country have been provided with workarounds to ensure they remain operational.
The ministry confirms that there was a data breach and unauthorized access to users' personal information.
The Office Privacy Commissioner of Canada has been informed of the situation, the department said.
Based on a report by Kate McKenna and Philip Ling, CBC News
With information from CBC