Cybersecurity incident at OPSEU/SEFPO

Yesterday (April 2, 2025), we discovered that an unauthorized third party had accessed our IT systems. All signs point to this being an attack by sophisticated actors, and not a failure on the part of our IT team and/or OPSEU/SEFPO’s systems.

• See you at Convention 2025, Apr 24 – 27

Upon discovering the incident, we immediately implemented countermeasures to contain the incident and engaged third-party cybersecurity experts to assist with containment, remediation and to conduct a thorough investigation to assess the cause and extent of this incident. We are also working with external legal counsel and law enforcement.During this time, disruptions to normal operations are expected. Please rest assured that we are working diligently to restore normal operations and implement alternative solutions to minimize the impact of the incident.Please be advised that the Member Portal is currently unavailable. We are working diligently to restore normal operations. In the meantime, please contact the following for assistance:

• Convention: [email protected].
• Event registrations, hotel bookings, time-off letters, etc.: [email protected].
• Member claims: [email protected].

For any other inquiries, please contact your Staff Representative.Our investigation is still in its early stages. We are conducting a thorough review and validation of our systems as part of this incident and are gradually bringing them back online.At this time, we cannot confirm which data held by OPSEU/SEFPO may have been compromised as a result of this incident. Should our investigation reveal that personal information was impacted, we will promptly notify affected individuals and provide appropriate resources and/or next steps.In the meantime, we encourage you to monitor your financial accounts and contact your bank immediately if you detect any suspicious activity. We also recommend that you be cautious of unsolicited communications that request personal information or direct you to a webpage asking for such information. If you receive any suspicious communication (phone call or email) that appears to come from OPSEU/SEFPO, please inform us immediately by contacting [email protected].Please rest assured, resolving this issue is our top priority. We appreciate your patience and understanding during this time.Sincerely,JP Hornick and Laurie NancekivellPresident and First Vice-President/TreasurerOPSEU/SEFPO