P2021-ND-220

Syncrude Canada Ltd.

The Organization?s information and technology support services are supplied by an external IT service provider. These services include the management of a server used by the Organization?s payroll to store payroll files. On August 11, 2021, an analyst with the Organization was performing testing and noticed improper server access settings, enabling access by all users with a LAN account logged into the network. The improper server access settings were in place as early as June 2019 and were fully corrected on August 12, 2021. The Organization reported that its investigation has not found any indication at this time that the information was accessed inappropriately.

File Type: pdf
Categories: 2021
Tags: Unauthorized disclosure