P2019-ND-132

On January 12, 2019, between approximately 11:30 a.m. – 12:00 p.m., a laptop used by a physiotherapist was stolen from an office accessed through a classroom within the Organization?s Calgary premises. The laptop contained the files for three program participants. The files were stored on the desktop of the laptop which was not encrypted. The laptop also contained information on an encrypted server/drive relating to an additional 85 participants and their parents/guardians. The incident was discovered within 30 minutes of its occurrence and the laptop?s log-in credentials were changed remotely, restricting access to the server files which were immediately encrypted. The Organization estimates that the maximum amount of time the laptop could have been in the possession of the third party before the log-in credentials were remotely changed was one hour.
The laptop has not been recovered.