Criminals Attempt to Sell RCMP Memory Key Containing Informant Details, Security Breach Report
Privacy concerns escalate as RCMP memory device containing data on 1,741 individuals is stolen and sold on criminal black market.
The federal privacy commissioner has raised significant concerns after a serious breach by the Royal Canadian Mounted Police (RCMP) resulted in sensitive personal information falling into the hands of criminals. According to a detailed report from the privacy watchdog, a memory key—an unencrypted USB storage device—containing the personal details of 1,741 individuals was lost, and police later discovered the data was being offered for sale within criminal networks.
The compromised information included the identities and details of victims, witnesses, complainants, subjects of interest, confidential informants, as well as police officers and civilian employees. The privacy commissioner's office became involved in March 2022 after the RCMP reported the incident, leading to what officials say was a rigorous and lengthy investigation.
Three weeks after the initial loss, an RCMP detachment received information from a confidential source confirming that members of the criminal community were attempting to sell the contents of the device. This development heightened concerns about the potential risks to those whose information was exposed, especially given the vulnerability of victims and informants whose identities could be exploited.
In its findings, the privacy watchdog strongly recommended that the RCMP adopt and enforce strict protocols governing the use of portable storage devices. Specifically, the report noted that police agencies regularly handle extremely sensitive data and that lapses in security measures can have wide-reaching consequences for individuals and public trust.
While the RCMP indicated it agreed in principle with the recommendations put forward by the privacy commissioner, it notably stopped short of providing a specific timeline for implementing enhanced safeguards. Privacy experts warn that without urgent action, future incidents could further erode confidence in law enforcement’s ability to protect sensitive data.
The privacy commissioner has called on the RCMP to prioritize the adoption of robust technical and administrative controls over digital storage devices, stressing that the incident demonstrates a clear need for systemic change in handling confidential information.
