BGRS and SIRVA Canada systems privacy breach affecting current and former federal employees
On this page
On October 19, BGRS confirmed that there had been a breach involving Government of Canada information held by BGRS and SIRVA Canada systems. These companies provide relocation support to federal employees.
The government took immediate action to investigate the breach, which involves information held by the companies about current and former Government of Canada employees, members of the Canadian Armed Forces and Royal Canadian Mounted Police (RCMP) personnel. This incident was also reported to the Canadian Centre for Cyber Security, the Office of the Privacy Commissioner, and the RCMP.
We are working to identify specific individuals that may have been potentially affected; however, preliminary information indicates that breached information could belong to anyone who has used relocation services as early as 1999 and may include any personal and financial information that employees provided to the companies.
The Government of Canada conducted an initial assessment of the data and have identified current and former employees who were potentially affected by the breach. The analysis of the data is being completed and is ongoing.
What should I do?
Take precautionary measures to safeguard financial and personal information online, such as:
- updating login credentials that may be similar to those used with BGRS or SIRVA Canada
- enabling multi-factor authentication on accounts that are used for online transactions
- monitoring financial and personal online accounts for any unusual activity.
If you see unauthorized access to personal or financial accounts, take the following steps:
Step 1
Notify your financial institution immediately
Step 2
Contact local police
Step 3
Contact the Canadian Anti-Fraud Centre (CAFC) using their Online Reporting System or by phone at 1-888-495-8501.
This is an evolving situation and further information will be shared as it becomes available. Current and former employees who have questions should contact their departmental Access to Information and Privacy (ATIP)_coordinator.
What services are being offered to help me?
Services such as credit monitoring or reissuing valid passports that may have been compromised will be provided to current and former members of the public service, RCMP, and the Canadian Armed Forces and their families who have relocated with BGRS or SIRVA Canada during the last 24 years.
Credit Monitoring
The Government of Canada remains committed to offering credit monitoring services for up to one year for all current and former employees and their families potentially affected by the BGRS and SIRVA Canada privacy breach. The credit monitoring services include credit monitoring, dark web monitoring, and identity (ID) theft insurance.
Research and analysis of the data is helping to identify those who may have been impacted by the breach. Individuals who have been identified in the breached data will receive an email from PrivacyNotifications-AvisdelaViePrivee (breach-atteinte@notification.canada.ca) with instructions on how to obtain credit monitoring services. Further communication with employees that have been relocated will be forthcoming.
Reissuing Passports
Individuals whose valid passport information has been identified as compromised as a result of this breach will be contacted by their departmental relocation service coordinator. Passports will be reissued, free of charge. Please do not go to a Passport Canada office to seek a replacement passport if you have not been directed to do so. Questions regarding regular passports can be directed to the passport program. For Diplomatic or other special passports, questions can be directed to the official travel contact.
Related Information
- Message to current and former public service employees and members of the Canadian Armed Forces and Royal Canadian Mounted Police - Canada.ca
- Privacy Commissioner initiates investigations into breach impacting federal government personnel who used relocation services
- File a formal privacy complaint
- Protecting yourself from identity theft online (ITSAP.00.033) - Canadian Centre for Cyber Security
- What to do if you're a victim of fraud (antifraudcentre-centreantifraude.ca)
Page details
- Date modified: