The personal information of approximately 40,000 people connected to Saskatchewan's Liquor and Gaming Authority (SLGA) was compromised during a 2021 Christmas Day cybersecurity attack, according to the province's information and privacy commissioner's report on the incident. "The number of affected individuals could have been much smaller had SLGA not retained personal information indefinitely," Ronald Kruzeniski, Saskatchewan's information and privacy commissioner, wrote. The commissioner recommended in his report that SLGA should implement policies and procedures to ensure it isn't holding personal information of former employees and former clients unnecessarily. SLGA warned that some health,financial, criminal and personal information may have fallen into the wrong hands. The privacy breach affected regulatory clients who had not been in contact with the SLGA in the past five years.
