Federation of indigenous peoples of Canada paid the hacker $20,000 in bitcoins
Federation of indigenous peoples of Canada (FSIN) to pay the hacker a ransom of $20,000 in bitcoins, reports CBC News. This week in Saskatoon in Saskatchewan, hundreds of delegates elect a new head of the Federation and two Vice presidents. In Canada, home to 1.2 million natives (Inuit, Metis, and representatives of various Indian tribes), representing 4.3% of the population.
Journalists learned about the incident not through official channels, and from two insiders of the Federation, who wished to remain anonymous. According to them, recently a hacker gained control over internal files and mailboxes FSIN. A malefactor was a large amount of data — in particular, files containing information about children in boarding schools, members of youth sports clubs and their coaches, land claims, and social security numbers, medical data cards, etc.
For some time (unclear how long) the hacking went unnoticed. In may, the employees of the FSIN received from the hacker an email demanding more than $100,000 in ransom.
After that, Treasurer, auditors, and other senior members of the organization from different provinces gathered for the Council. There were suggestions to immediately inform about the situation of all those affected by the breach, and to notify the police and make a public statement. However, none of these steps were not made.
Many members of the organization advise to managers and colleagues not to pay the ransom, fearing that a hacker will take money but will not return access to the files. The negotiations continued. In the end, someone from the participants of the FSIN took the initiative and paid a hacker more than $20,000 in bitcoins. When it learned senior members of the Federation, they demanded from colleagues and explanation of the report, but he declined to dialogue.
After hacking FSIN signed a contract with a company providing services for cyber security. Now the post of the Federation, it seems to be working normally, but there is no guarantee that the hacker has not retained a copy of all data.
FSIN declined to comment. One of its functionaries explained it by the fact that the incident is not desirable to discuss now, when there’s a big organizational meeting. According to him, the new head of the Federation, who shall be elected on October 25, may will answer questions of journalists.