Public Notice – Privacy Incident

Incident Description
The intrusion was detected on June 18, 2025, but analysis suggests that unauthorized access may have occurred as early as May 28, 2025. A malicious actor appears to have gained illegitimate access to certain data hosted on our servers.

Potentially Compromised Data
At this stage of the investigation, the potentially affected data includes:

• First and last names

• Contact information (mailing address, email, phone number)

• Social Insurance Number, date of birth

• Employment-related information (working conditions, tax details)

• ID photos and documents submitted by visitors

• Potentially other forms of identifying information

Measures Taken
As soon as the incident was detected, our security protocols were activated. Affected systems were isolated. Experts were brought in to contain the incident, assess the extent of the breach, mitigate its impact, and reinforce our protective measures. The affected employees, partners, and clients were promptly informed​. In accordance with privacy laws, the appropriate authorities have been notified and a collaboration is ongoing.

Recommended Actions for Affected Individuals

• Monitor your accounts for any unusual activity

• Be cautious of phishing attempts via email or phone

• Change your passwords

• While we do not offer credit services, we strongly recommend monitoring your credit reports and considering enrolling in a credit monitoring service such as those offered by Equifax or TransUnion

• If in doubt, contact us to verify the authenticity of any communication received in our name

Commitment to Protection
We reaffirm our commitment to upholding the highest standards in personal data protection. The security of your information remains one of our top priorities.

Contact Information
For any questions or additional information, please contact our Privacy Officer:

Marie-Eve Rousseau
rprp@groupeconnexion.ca