SANQC Response to the Data Breach

August 16, 2023

Your Students’ Association of NorQuest College (SANQC) would like to address a cyber data breach involving Gallivan, our Health and Dental broker. They informed us about a data breach that took place on March 10, 2023, at a third-party security company used for secure file transfers.

SANQC understands the importance of your trust and the protection of student information. We want to assure you that Gallivan is taking extensive measures to address the current situation and offer monitoring services at no charge to those impacted by the breach. They are not currently aware of any ongoing exposure of this information or of it being misused. They are taking a comprehensive and proactive approach by providing information about the incident, their response and steps that impacted students can take to help protect their information.

What is being done?

  • Gallivan has discontinued using the third-party service.
  • Gallivan is offering all impacted students comprehensive Credit Monitoring Service and Identity Theft Restorations as extra precautions.
  • Gallivan reported the incident to the Office of the Privacy Commissioner of Canada, as well as applicable provincial privacy authorities.
  • Communication will be sent by Gallivan to impacted students regarding the protection services at no cost.

References

To find out more about your rights to privacy and the protection of your personal information, as well as the potential for identity theft, we suggest the following references:

  • Office of the Privacy Commissioner of Canada (OPC), www.priv.gc.ca, 1-800-282-1376; the OPC website provides links to privacy authorities in the different provinces and territories
  • Canadian Anti-Fraud Centre, www.antifraudcentre-centreantifraude.ca, 1-888-495-8501

If you’d like more information about Gallivan’s Privacy Policy or how to contact their Chief Privacy Officer, please visit their website at gallivan.ca/privacy

Frequently Asked Questions

Why was my information initially required?
This information is used to confirm your enrollment or opt-out status of your student health and wellness program.

Was personal banking or health information included?
No. Only the information noted in the notice sent to impacted students was provided to the third-party vendor. No other information was provided or is at risk.

What should I do if my credit is compromised?
We urge you to sign up for the free credit monitoring services to help identify any potentially fraudulent use of your information. By registering for credit monitoring services, for the duration of your subscription you are automatically eligible for ID Theft Restoration services provided by CyberScout, a TransUnion company which includes Identity Theft Insurance coverage to protect against potential damages related to identity theft and fraud. If you believe you have been the victim of identity theft or have reason to believe your information is being misused, we urge you to immediately contact the police and file a police report. You can also call the Canadian Anti-Fraud Centre, www.antifraudcentre-centreantifraude.ca, 1-888-495-8501.

We understand the concerns an incident like this raises and share in those with our students. We appreciate the high level of care, transparency and expertise that Gallivan has shown during their investigation and are confident in their dedication to continual improvement of their digital security. We will continue to work closely with them and assist in any way possible to help safeguard student information. We encourage all those impacted to take advantage of the protections being offered.

Thank you for your patience and understanding. We are here for you.

For more information, please contact:

Travis Elkin
Engagement Director
travis.elkin@norquest.ca
780.644.6253