Cyber incident: CAA North & East Ontario
On January 25, 2023, CAA North & East Ontario experienced a systems outage, and we have since determined this was the result of a cyber incident. We immediately put procedures in place that enabled us to continue serving our Members while working with external IT experts to contain and resolve the incident.
Our investigation remains ongoing and CAA NEO is using best efforts to fully review the impacted data and confirm the scope of impacted information. From what we know at this point, the majority of the impacted information is non-sensitive, but a limited number of our Members’ personal sensitive information may have been impacted.
We are directly reaching out to those Members who may have been impacted. If you do not receive a direct notification from us, that means we determined your personal information was not impacted at this time.
Of note, we do not store the credit card or financial information of our Members in the ordinary course of business and we do not hold credit card numbers in our system.
Protection of personal information is critically important to us, and we sincerely regret any concern or inconvenience this may have caused. We encourage Members to be on alert for emails requesting personal or sensitive information and advise not to respond to these requests.
We want to assure you that we are working tirelessly to manage this incident. We have notified law enforcement and regulatory authorities, and we have retained external legal counsel to ensure we continue meeting our regulatory obligations as they arise.
This CAA NEO incident has not affected the data security of any other CAA Club. All eight CAA Clubs across Canada operate on separate IT and security systems.
We appreciate your patience and understanding as we work to resolve this matter.
Should you have any additional questions, our call centre is available Monday to Friday from 9 a.m. EST to 6 p.m. at 1-833-570-2912. You may also email at security-info@caaneo.on.ca. We ask for your patience in responding.
We ask that you wait for our designated call centre to open for any inquiries relating to the incident. Our usual call centre will be focused on providing roadside assistance and will not be able to provide further information on this matter.
