75K members of Alberta engineering group victims of phishing scheme

The email addresses of about 75,000 members of the APEGA may have been leaked in a data breach Monday, Sept. 21, 2015.
The email addresses of about 75,000 members of the APEGA may have been leaked in a data breach Monday, Sept. 21, 2015. Kin Cheung / AP Photo

EDMONTON – The information of approximately 75,000 members of the Association of Professional Engineers and Geoscientists of Alberta (APEGA) was involved in a data breach Monday. The group said no passwords, credit card or other financial information was leaked in an update Tuesday morning.

“APEGA senior leaders have initiated an independent investigation, by an outside party, of yesterday’s data breach,” said the organization on its website at 12 p.m. Tuesday. “High-level results will be shared with members as appropriate upon completion of the investigation and report. Further information about the currently suspended application process and suspended Member Self-Serve Centre will be shared as it becomes available.”

The APEGA, which represents “nearly 76,000 members” in total, said it experienced a “significant data breach” at 11:45 a.m. Monday.

Breaking news from Canada and around the world sent to your email, as it happens.

The first name, last name and email addresses of an estimated 75,000 members were given to “an unknown party as the result of a phishing event,” the group said in a news release.

Story continues below advertisement

The association is telling its members not to respond to any emails that appear to come from the APEGA. It’s also telling them not to provide any personal information by email, including member ID, credit card information or passwords.

The APEGA’s member self-service centre has been temporarily suspended. Members are asked to visit the group’s website for updates.

One member said he received the below email from APEGA Monday night:

APEGA Member,
APEGA experienced a significant data breach this morning at 11:45 a.m.
75,000 Member records consisting of first name, last name, Member IDs, and email addresses were given to an unknown party because of a phishing event.
If you receive ANY emails that appear to be from APEGA DO NOT RESPOND. Do not provide or confirm any personal information such as your Member ID, credit cards, or passwords.
We apologize for this significant breach in privacy and are currently focusing all of our efforts on preventing any further occurrence.
As a precaution, we are temporarily suspending access to the Member Self-Service Centre.
Further information will be posted on our website as it becomes available.
Mark Flint, P.Eng.

The APEGA has regulated the practices of engineering and geoscience in Alberta since 1920.

With files from Erika Tucker

Sponsored content