Skip to content
{notification.title}
{notification.description}

Notice of cybersecurity incident

We are informing our clients and community about a cybersecurity incident that affected our organization.

On June 26, our IT team was alerted to suspicious activity through our cybersecurity monitoring tools. The investigation into the incident has confirmed that unauthorized access to our systems occurred and has resulted in a privacy breach.

Through a phone phishing (vishing) scam, an unauthorized user gained access to an individual’s workstation and installed a program that copied attachments stored on that device. Some of these records contained personal information of approximately 300 WCB clients.

The accessed information includes names, birth dates, mailing addresses, payroll and banking details, Social Insurance Numbers and health data.

After identifying the cybersecurity breach, we secured the affected systems, initiated an investigation with our cybersecurity partners and took further steps to enhance our security measures. The WCB’s current security controls effectively contained the incident and minimized its impact.

We have notified the Manitoba Ombudsman of the breach as required by subsection 41.1(4) The Freedom of Information and Protection of Privacy Act (FIPPA) and 19.0.1(4) of The Personal Health Information Act (PHIA). Additionally, we contacted law enforcement and the Canadian Centre for Cyber Security.  

We are contacting all affected clients directly. Individuals whose personal information was involved are being notified by telephone and by letter or by email.  As a precaution, we are providing complimentary credit monitoring and identity protection services to all affected clients. These services include credit monitoring, identity theft restoration, fraud resistance and dark web monitoring.

If you have received a notification from us, we encourage you to:

  • Enroll in the complimentary credit monitoring service.
  • Remain vigilant and monitor your financial account statements and credit reports for unusual activity.
  • Report any suspicious activity to your financial institution promptly.

Our operations continue without interruption.

We sincerely regret this incident occurred and understand the concern it may cause. Protecting the privacy and security of the information entrusted to us is a responsibility the WCB takes seriously. We continue to strengthen our security measures and are committed to keeping affected individuals informed.

If you have any questions or concerns about this incident, please contact the WCB at 204-954-4321 or 1-855-954-4321 (toll-free in Canada and the US) between 8 AM and 7 PM.