On August 3, 2023, Quebec’s Ministry for Cybersecurity and Digital Affairs (MCN) confirmed it was undergoing a cybersecurity incident caused by “an employee’s actions.”
On May 23, 2023, the employee transferred the data of 529 staff members in order to provide information and ease her successor into the transition. According to the Ministry, she had access to the information in her professional capacity and acted “in good faith”. She also cooperated with authorities.
“Even though the employee’s intentions were not to use this information unlawfully, her actions went against current security rules for MCN personnel,” stated a Ministry press release. The employee faced disciplinary action from her supervisors. The MCN lodged a complaint, and an investigation was opened.