Supply chain
⛓ Supply Chain
Saskatchewan HAL system Third-Party Breach (January 2021)
Primary Source ↗Incident Details
Saskatchewan privacy commissioner investigates potential breach of hunting licensing system | Globalnews.ca. Saskatchewan’s privacy commissioner is currently investigating a possible security breach involving the province’s hunting, angling, and trapping licence system. Saskatchewan’s privacy commissioner is investigating a potential privacy breach involving the province’s hunting, angling, and trapping licence system ( HAL system ). The province said the incident occurred on Jan. 7 when an email regarding Hunter Harvest surveys was sent to HAL customers from a third-party agency called Aspira. Third-party company: Aspira.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Aspira
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2021-01-01 Breach occurred
- 2021-01-13 Publicly disclosed