Oshawa City Fire Services Data Breach (2021)

Oshawa is sending some senior staff back to school for a refresher course on its Privacy Breach Response Policy and Procedure after private information was “inadvertently” leaked internally this summer.Fire Chief Derrick Clark sent a copy of an Excel file entitled ‘2021 Master Sick Report’ via email to Commissioner of Community Services Ron Diskey on August 6. The document included a listing of the names of all members of Fire Services staff who have taken time off due to illness in 2021, affecting a total of 160 City staff. The document also included associated dates for sick days/leave, as well as more specific details in some cases, such as the reason for the absence. Diskey, who has worked for the City for nearly 40 years, replied to Clark’s email in a forward to all members of the Corporate Leadership Team but inadvertently included a copy of the Master Sick Report. In response to receipt of the email and attachment, the incident was reported to the City Clerk and Information, Access and Privacy Officer that day. The City Clerk received confirmation from all members of the Corporate Leadership Team that the record at issue has been destroyed. Additionally, several members of the Corporate Leadership Team confirmed that they did not open the attachment and didn’t see the personal information.