Yellow Pages Canada becomes latest cyber attack target

Yellow Pages Canada becomes the latest Canadian organization to be hit by a cyber attack.

In an email to CityNews Ottawa, a spokesperson for the company confirmed that the breach compromised the personal information of employees and some customers, adding that everyone affected has already been informed of the incident.

“Based on our investigation to date, we have reason to believe that the unauthorized third party stole certain personal information from servers containing YP employee data and limited data relating to our business customers,” the spokesperson said.

The company has also launched a comprehensive investigation with the help of external cybersecurity experts “to contain the incident and ensure that we had secured our systems,” the spokesperson said further.

Similar attacks have disrupted Canadian businesses in recent months, including bookstore chain Indigo, which saw its e-commerce operations and in-store payment systems frozen by a cyber incident last February.

In response to the attack, a union representing Indigo’s employees has asked the retailer to disclose more information about the data breach and offer additional support to staff affected by the incident.

As for Yellow Pages Canada, the spokesperson contacted by CityNews said that the directory’s services have now “substantially” been restored.

A separate report from IT news site BleepingComputer attributed the Yellow Pages attack to the ransomware group Black Basta.

The report said it had confirmed a tweet by an independent cybersecurity analyst claiming that the group posted about Yellow Pages Canada on its data leak website.

What are your thoughts on the recent string of cyber attacks impacting Canadian organizations? Feel free to comment below.