The Toronto Zoo has disclosed a cyberattack that targeted the Zoo in early January 2024. The zoo has since conducted an extensive analysis to understand the full scope of the breach and notify those affected. After months of work, the Toronto Zoo is now issuing a final notification to individuals whose data was exposed in the cyberattack on Toronto Zoo.
The Toronto Zoo cyberattack involved a breach of personal data, which was later leaked on the dark web. This data includes transaction information related to visitors and members who made general admission and membership purchases between 2000 and April 2023. While the data was leaked, it was done in such a way that downloading the information has been difficult. As of now, it is not publicly available, though there is a possibility that this could change.
The compromised data includes:
- First and last names of affected individuals.
- Street address information, phone numbers, and email addresses for some individuals.
- Credit card details, including the last four digits of card numbers and expiration dates, but only for those who made transactions between January 2022 and April 2023.
While this is a serious breach, the zoo has stated that the information involved is of limited sensitivity. Nevertheless, the zoo is advising all those affected to remain vigilant for potential phishing attempts and online fraud. They recommend that individuals scrutinize any unsolicited communications and regularly monitor their financial statements for signs of unauthorized activity.
Toronto Zoo Cyberattack: Response and Investigation
As soon as the Toronto Zoo cybersecurity incident was detected, the organization moved swiftly to notify affected parties, including current and former employees, volunteers, and donors. The zoo’s response to this breach has been both thorough and transparent, reflecting its commitment to addressing the issue with care and responsibility.
The Toronto Zoo has reported the incident to the Office of the Information and Privacy Commissioner of Ontario (IPC), which has launched its own investigation into the matter. The IPC has informed the zoo and those affected that filing individual complaints is not necessary, as the commission is already addressing the incident. For further information, individuals can visit the IPC’s official website.
On January 17, 2024, the Toronto Zoo initially disclosed the breach, revealing that personal data had been stolen from a compromised file server. The initial notification focused primarily on current and former staff, with a small number of volunteers also impacted. Affected individuals were offered credit monitoring services due to the nature of the exposed data. At that time, the zoo confirmed that customer information stored in their customer information system was not directly impacted by the breach.
The Impact on Employees and Conservation Efforts
One of the most challenging aspects of this cyberattack on Toronto Zoo has been the loss of sensitive data affecting current and former employees. Beyond the personal toll on those individuals, the breach also led to the unfortunate loss of decades of vital wildlife conservation research. This has caused distress to the zoo’s staff, volunteers, and the broader community, as this research was essential to ongoing wildlife preservation efforts.
In response to this setback, the zoo has worked to enhance its cybersecurity measures. Several steps have been taken to improve the security of the zoo’s information technology infrastructure. These improvements have been made in collaboration with the City of Toronto’s Chief Information Security Office, whose expertise and support have been invaluable during this difficult period. The zoo’s efforts are designed to provide stronger network defenses and better capabilities to detect and respond to security issues in the future.
Conclusion
While the Toronto Zoo cyberattack has presented challenges, the zoo is determined to learn from the experience and prevent similar attacks in the future. Grateful for the patience and support of its employees, volunteers, members, guests, and the wider community, the zoo remains committed to transparency and accountability throughout the resolution process
