News and Updates on Information Technology

Canada – Aurora Cannabis

Exploit: Unauthorized Access
Aurora Cannabis: Marijuana Dispensary Chain

Risk to Small Business: 1.664 = Severe

An email sent to an ex-employee of Aurora Cannabis uncovered a data breach affecting the personally identifiable information of the company’s current and past employees. It appears that the data was captured after unauthorized parties accessed the company’s SharePoint and OneDrive. The incident is still being untangled, as conflicting reports crop up about what information was stolen.

Individual Risk: 2.580 = Severe

The actual details about the stolen data are unclear but are reported to include employee and former employee PII, credit card information, government identification, home addresses and banking details.

Customers Impacted: Unknown

How it Could Affect Your Customers’ Business: It’s not all ransomware these days – good old-fashioned hacking is still a risk that every business faces. When information like this makes its way to the Dark Web, it makes hackers’ jobs easier.