Skip to main content

Equifax Inc., offices in Atlanta

Mike Stewart/AP

Equifax Canada is facing intensifying calls for transparency on its massive cyberhack as the Canadian Automobile Association informs thousands of its members that their data may have been compromised and frustrated consumers ask questions about why they're being treated worse than their U.S. counterparts.

CAA said Thursday it partnered with Equifax on its identity protection program and is notifying the roughly 10,000 members who participated that they may have had sensitive data divulged in the security breach made public last week.

The auto organization's program required members to register their personal information such as credit cards, banking information and e-mail address, with the option of providing a social insurance number.

Story continues below advertisement

It appears that the sensitive information of CAA members who signed up for the identity protection program was stored with Equifax USA, said Ian Jack, CAA managing director of communications and government relations.

The company has shied away from public comment, however Equifax Canada's customer service agents have told callers that only Canadians who have had dealings in the United States are likely to have had their information compromised in the data breach. That includes those who have lived, worked or applied for credit south of the border.

"Equifax has not been forthcoming with information to us despite our repeated requests," Jack said.

The identity protection program began in March 2015 and was terminated on July 1, weeks before Equifax discovered the hack on July 29.

Jack said the CAA has been trying since the first reports of the Equifax breach surfaced to determine if it affects any of its approximately 10,000 members who signed up for the program. It is also writing to Canada's privacy commissioner to express concern and ask that they push Equifax to provide more information to Canadians.

"We value our members' privacy. Our contract with Equifax explicitly said customer data would be governed by Canada's privacy law, PIPEDA," Jack said.

"We chose them as a partner because of their then high reputation. CAA did not handle or retain any of the information provided to Equifax."

Story continues below advertisement

Equifax Canada did not respond to requests Thursday from The Canadian Press.

The development comes as Canadians who are worried they might be victims of the Equifax Inc. voice concern they are being treated as an afterthought in the wake of one of the largest online data breaches in history.

Equifax Inc. said last Thursday that a security breach occurred over the summer that compromised the private information of up to 143 million Americans, along with a undisclosed number of Canadians.

But the company has not provided further details, including how many Canadians may have been exposed.

The company has provided consumers in the U.S. with a website that shows whether they are at risk of identity theft and is allowing them to monitor their files for free for one year.

But the online database does not provide Canadians with accurate information because it is based on U.S. social security numbers. The Equifax Canada website says it costs $19.95 per month for the monitoring service.

Story continues below advertisement

Toronto lawyer Frances Macklin said she is frustrated that Canadians are more in the dark than U.S. consumers and questioned why there isn't a dedicated portal for consumers north of the border.

"We're equally affected. Just because I don't have a social security number, I don't get access to information," said the partner at Gowlings law firm. "I'm completely bewildered by that."

Communications expert Warren Weeks believes Equifax could not have handled this issue in a worse way.

"We're talking about the gateway to all of your financial information in your life," said Weeks, owner of communications firm Weeks Media Group.

"And Canadians, in specific, don't know if they've been targeted or not or they've been impacted or not? I think in 2017, that's unacceptable."

However, he added, it's common for a Canadian subsidiary to be told to keep tight-lipped by its U.S. parent when issues arise.

Story continues below advertisement

Equifax may also be under more regulatory pressure in the U.S. than in Canada, said Tamir Israel, a staff lawyer with the Canadian Internet Policy and Public Interest Clinic in Ottawa.

The U.S. has federal regulations in place that govern credit reporting companies such as Equifax, which outline both proper business practices and identity theft, Israel said.

"If they don't deal with this issue appropriately, 1 / 8that law 3 / 8 is likely to get expanded to address whatever shortcomings they had."

In Canada, credit reporting agencies are regulated by individual provinces and territories, he added.

"Because of that mismatch, it falls through the cracks a little."

The Globe's Personal Finance Editor Roma Luciw explains how credit scores work and why they're important Globe and Mail Update
Report an error
Tickers mentioned in this story
Unchecking box will stop auto data updates
Due to technical reasons, we have temporarily removed commenting from our articles. We hope to have this fixed soon. Thank you for your patience. If you are looking to give feedback on our new site, please send it along to feedback@globeandmail.com. If you want to write a letter to the editor, please forward to letters@globeandmail.com.

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to letters@globeandmail.com. Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to letters@globeandmail.com. Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff.

We aim to create a safe and valuable space for discussion and debate. That means:

  • Treat others as you wish to be treated
  • Criticize ideas, not people
  • Stay on topic
  • Avoid the use of toxic and offensive language
  • Flag bad behaviour

Comments that violate our community guidelines will be removed.

Read our community guidelines here

Discussion loading ...

Cannabis pro newsletter
To view this site properly, enable cookies in your browser. Read our privacy policy to learn more.
How to enable cookies