Yellow Pages Canada becomes latest cyber attack target

Employee and customer data compromised in breach

Yellow Pages Canada becomes latest cyber attack target

Cyber

By Mika Pangilinan

Yellow Pages Canada becomes the latest Canadian organization to be hit by a cyber attack.

In an email to CityNews Ottawa, a spokesperson for the company confirmed that the breach compromised the personal information of employees and some customers, adding that everyone affected has already been informed of the incident.

“Based on our investigation to date, we have reason to believe that the unauthorized third party stole certain personal information from servers containing YP employee data and limited data relating to our business customers,” the spokesperson said.

The company has also launched a comprehensive investigation with the help of external cybersecurity experts “to contain the incident and ensure that we had secured our systems,” the spokesperson said further.

Similar attacks have disrupted Canadian businesses in recent months, including bookstore chain Indigo, which saw its e-commerce operations and in-store payment systems frozen by a cyber incident last February.

The attack on Indigo was later connected to a cybercriminal group, which claimed it was affiliated with the LockBit ransomware website and threatened it would leak stolen employee data.

In response to the attack, a union representing Indigo’s employees has asked the retailer to disclose more information about the data breach and offer additional support to staff affected by the incident.

As for Yellow Pages Canada, the spokesperson contacted by CityNews said that the directory’s services have now “substantially” been restored.

A separate report from IT news site BleepingComputer attributed the Yellow Pages attack to the ransomware group Black Basta.

The report said it had confirmed a tweet by an independent cybersecurity analyst claiming that the group posted about Yellow Pages Canada on its data leak website.

The leak, according to BleepingComputer, has compromised sensitive personal information such as ID and tax documents.

What are your thoughts on the recent string of cyber attacks impacting Canadian organizations? Feel free to comment below.

Related Stories

Keep up with the latest news and events

Join our mailing list, it’s free!