Sunday, January 6, 2019

ALLEGED ONTARIO CAS HACKER TRAIL UPDATE: NOV. 21 2018.


NEW APRIL 2019 TRIAL DATE  NOW IN DOUBT AS CREDIBILITY OF FCSLLG'S PRIVATE INTERNET SECURITY EXPERT CALLED INTO QUESTION.

UPDATE: NOV. 22 2018.

THE TRIAL DATE HAS NOW BEEN SET FOR; June 21st, 26th, 28th, and August 13th, 14th, and 15th, 2019. Next court date is Feb. 19th, 2019 for a judicial pre-trial. Check out Kelley's blog for more information.

KelleyandDerek.com

Why is it taking so long for the alleged Ontario CAS hacker Kelley Denham to go to trial, wasn't Kelley Denham charged years ago? Oh that's right, the crown is still trying (hoping) to get Kelley to take a deal to plead guilty for a slap on the wrist nearly three years after the charges were first laid instead of accepting her not guilty plea and presenting his rock solid case to the judge..

Rumors, Gossip and Trial Talk.

The extent of document breach regarding documents accessible on FCSLLG’s public website is rumored to have included;

1. A summary of insurance claims made against the agency; there were identified sexual abuse claimants, a wrongful dismissal, a foster child having a baby in her foster parent’s bathroom where both foster parents are named and two other foster parents named as being criminally charged

2. A report from the provincial advocate on an identified child, a 12-year old boy.

3. A coroner’s pre-inquest report on an identified male

4. Email correspondence between FCSLLG and media regarding a child whose mother was trying to fundraise for his care.

5. A woman’s resume.

6. Personal contact information of FCSLLG’s board members.

7. A letter sent to an “agitated community member” from FCSLLG

There are also documents which appear to be FCSLLG board of director meeting minutes. In these minutes, many of the cases noted above are discussed in detail.

Since Kelley was charged she has faced enormous pressure from the crown's office to essentially sign a confession and plead guilty in exchange for leniency. Kelley refused to plead guilty and then after six months of delays setting a trial date on the crown's part, the crown canceled the trial.

The following year the College of Social Work asked Kelley to sign a near verbatim copy of the statement of agreed upon facts the crown had presented to Kelley the year before, then threaten to sue her for the cost of holding a disciplinary hearing and finding her guilty if she refused to sign it.

Twenty-three months later the both the crown and college continue to be reluctant to accept Kelley's "not guilty" plea and prove the facts actually show Kelley Denham is guilty of anything.

M.M. v. Lanark, Leeds and Grenville Children’s Aid Society, 2018 ONSC 5032 (CanLII)

[19]           The events of the various actions, which attracted the attention of the media in Perth, Ontario, are of interest to the citizens of the East Region, who have an interest in the operation of their local children’s aid societies, but the events are of little more than of prurient interest to the citizens of Toronto.

[20]           Ms. Denman, who is the central actor either as a commendable whistleblower or as a deplorable newsmonger and hacker and leaker of confidential information is seriously inconvenienced and possibly prejudiced by having to defend or prosecute the various proceedings in Toronto, where she has been unable to obtain a lawyer to represent her.

https://www.canlii.org/en/on/onsc/doc/2018/2018onsc5032/2018onsc5032.html

2 Charges Have Been Dropped against Ms. Denham so far.

AS OF MAR. 21, 2018 THE FOLLOWING CHARGES AGAINST KELLEY DENHAM HAVE BEEN DROPPED:

1) Theft under $5000
2) Traffick in identity Information

Charges still pending against Kelley Denham;

1) Mischief over $5000
2) Mischief to Data
3) Unauthorized use of a Computer
4) Publication of Identifying Information

Ms. Denham's trial was scheduled for Sept. 19, 20, 26 and 27, 2018 but was delayed so Miss Denham could retain new legal council.

A new trial date had been set to take place in April 2019 but over 6 days over 2 or 3 weeks but may be delayed again.

Smiths Falls, Ont., pair charged in family services document breach.

Man, woman could face 10-year prison sentence, fines of up to $10,000 CBC News · Posted: Aug 09, 2016

https://www.cbc.ca/news/canada/ottawa/smiths-falls-hacked-family-services-charges-laid-1.3713774

Charges dropped against Smiths Falls man accused in family services data breach.

Woman charged with same offences could still face 10-year prison sentence, fines of up to $10,000 CBC News · Posted: Dec 19, 2016

https://www.cbc.ca/news/canada/ottawa/smiths-falls-hacked-family-services-charges-dropped-man-1.3903151

"Ontario's children's aid societies grappling with how to monitor privacy breaches."

Why? Meet the ISG Series Integrated Security Gateway. It's just one of the many older solutions on the market to protect everything from extremely sensitive corporate data to confidential client information.

The ISG Series Integrated Security Gateways are ideally suited for securing enterprise, carrier, and data center environments where advanced applications, such as VoIP and streaming media, demand consistent, scalable performance. The Juniper Networks ISG1000 and ISG2000 Integrated Security Gateways are purpose-built security solutions that leverage a fourth-generation security ASIC, along with highspeed microprocessors to deliver unmatched firewall and VPN performance. Integrating best-inclass firewall, VPN, and optional Intrusion Detection and Prevention, the ISG1000 and ISG2000 enable secure, reliable connectivity along with network-and application-level protection for critical, high-traffic network segments.

Network segmentation: Security zones, virtual systems, virtual LANS and virtual routers allow administrators to deploy security policies to isolate guests and regional servers or databases.

Optional Integrated IDP:

The ISG Series firewall/VPN with IDP uses the same award-winning software found on Juniper Networks IDP Series appliances.

The IDP security module combines eight detection mechanisms, including stateful signatures and protocol anomaly detection.

The ISG with IDP defends against security threats such as worms, trojans, malware, spyware, unauthorized users and hackers and can provide information on rogue servers and data on applications and operating systems that were inadvertently added to the network. Application signatures enable administrators to maintain compliance and enforce corporate business policies with accurate detection of application traffic.

The ISG Series Integrated Security Gateways
https://netpoint-dc.com/blog/wp-content/uploads/2015/11/1100036-en.pdf

Read more: Ontario's children's aid societies grappling with how to monitor privacy breaches.
http://yourlegalrights.on.ca/news/ontarios-childrens-aid-societies-grappling-how-monitor-privacy-breaches

Picture of CAS hyperlink posted online.

By LAURIE MONSEBRAATENSocial justice reporter
Mon., April 18, 2016.

Police are investigating an unprecedented security breach at a Brockville-area children’s aid society after an electronic file containing the names of 285 families involved with Family and Children’s Services of Lanark, Leeds and Grenville was made available on Facebook.

The breach was discovered Monday at 1:42 p.m. after both a client and a community member called the society to complain that a picture of a hyper-link to the confidential FCSLLG report was posted on the Smith’s Falls Swapshop Facebook page, executive director Ray Lemay told the Star Monday night.

https://www.thestar.com/news/canada/2016/04/18/childrens-aid-families-names-posted-online.html

:::

"A hyperlink by itself, should never be seen as “publication” of the content to which it refers."

Supreme Court Of Canada, 2011...

Only when a hyperlinker presents contents from the hyperlinked material in a way that actually repeats the content, should that content be considered to be “published” by the hyperlinker;hyperlinks are, in essence, references which are fundamentally different from other acts of publication.

http://harvardlaw74.com/hyperlink-is-not-publication-rules-the-supreme-court-of-canada/

The link took each person to FCSLLG's privately operated public information website hosted by a Michigan server where FCSLLG was carelessly storing client and corporate documents.

(The data was geographically located in the U.S.)

Unfortunately this Michigan server deletes all it's logs every 30 days along with all the traffic information from FCSLLG's website.. Who was coming and going to their totally unprotected even by a password website was all deleted except for a few weeks before the Smiths Falls police requested the information logs from the Michigan server which would have been deleted otherwise..

No one was watching the information and no security programs or hardware was protecting that information and because ALL THE LOGS WERE DELETED THERE IS NO WAY TO GO BACK AND LOOK.

KelleyandDerek.com

WHO IS KELLEY DENHAM?

A new program being offered in Smiths Falls, Bridges out of Poverty, helps participants assess their lives and give them the agency, confidence and a plan to move beyond their current circumstance. And while the program is new in town, it's not new to the world.

“Bridges out of Poverty is a movement, a movement that calls on the entire community to help build bridges out of poverty for local families,” said co-facilitator of the program, Kelley Denham. "It’s in six countries now. In Canada, it’s big in Sarnia and Lambton area."

The Adult Learning & Training Centre, along with Lanark County Mental Health, Ontrac, Lanark, Leeds and Grenville Health Unit, Rideau Community Health Services and Health Link Rideau Tay, brought the Bridges out of Poverty initiative to Smiths Falls for the first time this spring.

https://www.insideottawavalley.com/news-story/8773652-smiths-falls-program-helps-participants-build-bridges-out-of-poverty-/

The group, made up of seven people, including two youth, a senior, somebody in housing who was a mother of three young kids and three people on Ontario Disability Support Program, participated in the inaugural run of the program. All seven participants graduated in June. The group met once a week for 12 weeks.

The program is based on the work of Ruby Payne, American educator and author known for her work on the culture of poverty, including the invisible rules of the social classes.

“It’s really cool stuff,” said Denham, who has real-world experience dealing with poverty, she realized the effectiveness this program could have on others. “It made a lot of sense to me having been poor, and then not poor, and then poor again, and then not poor.

“I know how hard it is because you’re living day-by-day, you’re just surviving," she said. "You’re not going to think about tomorrow if you don’t know what you’re going to eat today. It’s impossible.”

Before the Bridges out of Poverty program, Denham had been trying to help people on a one-on-one basis. But after seeing a Bridges out of Poverty workshop, put on by Gayle Montgomery, while attending Algonquin College she knew there could be potential to bring the program to town.

“She’s explaining how to get out of poverty and I’m like: ‘That’s exactly what I did. This is the road map. This is how you do it.'”

Last August, a working group formed in town and the program was born.

Participants work on creating their “future stories” as well as thinking critically about what poverty means, how to break the cycle of poverty to create life choices, and what nuances exist when thinking about class structures.

“This model defines poverty as the extent someone does without resources,” explained Denham. Poverty isn’t solely defined by income; the reasons that keep people in a cycle of poverty is complex.

“Most organizations either say it’s individual choices that keep people in poverty and others say it’s systemic barriers that keep people in poverty,” said Denham. “The reality is it’s a mix and in order to address poverty we need to address it at all of these levels.

“A lot of people in poverty believe they are faded — nothing will ever get better, there’s no other options, I had kids young I’m always going to be poor and that’s just it.”

The aim of the workshop is to help individuals identify which of their resources are low and work toward building them with whichever resources they have that are high.

Bridges out of Poverty participant, Faith-Marie Donaldson, speaks about the program and how it helped her build confidence and agency to help her, help herself. — Evelyn Harford/Metroland

One participant, Faith-Marie Donaldson, 24, said the program helped develop her agency to take control of her own situation. Since graduating from the program in June, Donaldson has landed a job and has plans to get the rest of her four credits required to receive her high school diploma.

“I’ve been wanting to get a job for a while, but with anxiety it was nerve-racking to take the first step,” she said. “I think it’s because of this group, I was able to take the first step. Everybody needs a push once in a while.”

This program, said Donaldson, has helped give her the confidence she needed to move forward.

“It’s really eye-opening, educational,” she said. “I don’t think I’d be where I am without this group. I want to make a difference in this world — but my confidence to do it was actually pretty low.”

Donaldson has seen both sides of the coin — experiencing life in poverty as well as in the middle class — and now living somewhere in between.

“Growing up, we were always OK with money,” she said.

But when her dad lost his job at Hershey, an employer he had worked for since he was a teenager, things changed.

“We struggled a lot with money.

“It was a weird transition,” she said of experiencing poverty for the first time. “I was so young. I didn’t realize the impact.”

Donaldson explained that there’s a stigma that’s attached to being poor and the invisible divide that separates those in poverty from those in the middle and upper classes.

And why, she said she always finds a way to be nice to others.

“You have no how much they (others) could be struggling,” she said. “You have no idea what they’re going through.”

Being poor comes with a lot of fear, explained Donaldson.

“But,” she said. “When you have a community (to support you) it helps soften the blow.”

And while community does come together, Donaldson feels that more empathy, tolerance and acceptance, is needed.

“We need to actually come together as a community,” she said. “We need to understand what the other side of the fence is going through or else we’re always going to get stuck in the patter of stigma and judgment.

“Until we do that, nothing is going to get better."

Donaldson’s advice to others considering the program: “Go for it.”

Now Donaldson has a job, is moving out of her parents’ house, and has an offer to help co-facilitate a program at Lanark County Mental Health. She also got an offer to help co-facilitate the Bridges out of Poverty group.

Donaldson said she always wanted to go into counselling but didn’t think she could do it. But, now with these recent offers, her confidence to chase her dreams has been reignited.

HOW TO PARTICIPATE

In order to get as many people through the door, the Bridges out of Poverty program takes care of everything for their participants — including child care and lunch.

Along with donations from involved agencies, the Bridges out of Poverty program has received donations from Andress’ Independent Grocer and Apple House Art Gallery. Apple House Art Gallery founder, Patricia Mosher, has also volunteered her time to provide the child-care and has developed an artistically-focused curriculum. The Smiths Falls District Collegiate Institute’s hospitality class has provided lunch, while Glad Tidings church in Perth is providing snacks which is likely breakfast for many participants.

The second round of Bridges out of Poverty will start this September. If you would like to participate reach out to Kelley Denham at kelley.denham@altclanark.com.

For more information visit, https://www.ahaprocess.com/.

by Evelyn Harford.

Evelyn Harford is the reporter for the Smiths Falls Record News. She can be reached at eharford@metroland.com.

Email: eharford@metroland.com

https://www.insideottawavalley.com/news-story/8773652-smiths-falls-program-helps-participants-build-bridges-out-of-poverty-/

Lake 88.1 “In Focus”interview with LAO’s Andreas Von Cramon and Nathalie Champagne: Date: April 8, 2014.

Description: Transcript of April 8th, 2014 “In Focus” interview by Bob Perreault from Lake 88.1 FM in Perth and Andreas Von Cramon, Supervisory Duty Counsel Criminal/Family Law and Nathalie Champagne, District Area Director, Ottawa Region.

Anderas von Cramon Supervisory Duty Counsel Family, Criminal Law in Brockville, Lanark, Leeds and Grenville and is married to the CAS in house lawyer for FCSLLG, Karynn Von Cramon.

FCSLLG Manager of Legal Services Karynn Von Cramon

$112,779.01 ($158.34 per hour)

https://www.ontario.ca/page/public-sector-salary-disclosure-2017-organizations-no-salaries-disclose

Anderas von Cramon operates a free family law clinic for families dealing with the CAS out of the courthouse to provide advice to people and to help them to prepare for family law cases, or to try to resolve their family cases outside the court. (sign consent forms and service agreement)

Parents go in praying for competent representation and good advice and instead get someone willing to bill legal aid to guide the parents through the process of having all their rights, dignity and children stipped away from them. According to legal aid right now family lawyers willing to accept legal aid bill an average of $40 000 dollars per case for not filing documents or filing them after the court has already granted the society a supervision order.. Or the society requests the judge order the parents to sign consent or service agreements after the parents have refused to sign anything and the judges oblige the society by ordering the parents to just cooperate.

Anderas von Cramon also gives basic help drafting documents. Basic means what? It means no help swearing in and filing documents or serving the document before the deadline - which means he does less than nothing.

I'm willing to bet if we could check, nobody Anderas von Cramon has ever "helped" has ever had anything filed before or after the deadlines have passed unless it was to submit to FCSLLG..

https://www.legalaid.on.ca/en/news/newsarchive/downloads/2014-04-08_In%20Focus%20interview.pdf?t=1495843200036

Just by failing to file the required paperwork by the deadline before a first appearance in family court on a child protection matter will potentially earn a legal aid lawyer a minimum of $40 000 according to legal aid Ontario.

Meet Kim Morrow, the former director of services for FCSLLG in this two hour candid recording of the beginning of the complaint process after FCSLLG offered us an apology letter that actually blamed us for everything they did wrong after withdrawing their application for a protection order from the Perth family court.

https://www.facebook.com/FamiliesUnitedOntario/videos/499149713628131/

FCSLLG is almost a million dollars in the hole and still sinking...


Public sector salary disclosure 2017: Family and Children’s Services of Lanark, Leeds and Grenville is a non-profit agency.

Information on all public sector organizations, covered under the Public Sector Salary Disclosure Act, with no employees who earned $100,000 or more in 2017.

Brown Derrick $101,674.15 $158.34 FCSLLG Human Resources Manager

Eastwood Jennifer $116,121.74 $140.07 FCSLLG Director of Corporate Services

Edmundson Nicola $101,143.12 $158.34 FCSLLG Senior Counsel

Fleet Michael $106,097.47 $158.34 FCSLLG Director of Service

Harper Penny $101,610.27 $158.34 FCSLLG Manager of Finance

Jonkman Debbie $104,048.11 $927.59 FCSLLG Service Manager

Knapp-Fisher Cathie $111,006.23 $158.34 FCSLLG Director of Operations and Innovation

Leblanc Dana $102,348.80 $158.34 FCSLLG Service Manager

:::

Lemay Raymond $194,498.98 ($9,123.92) FCSLLG Executive Director

:::

Marcotte Erin Lee $106,097.47 $158.34 FCSLLG Director of Service

Morrow Cynthia $103,591.80 $158.34 FCSLLG Service Manager

Simon Siju $106,462.80 $158.34 FCSLLG Service Manager

Thomas Stephanie $101,611.80 $158.34 FCSLLG Service Manager

Von Cramon Karynn $112,779.01 $158.34 FCSLLG Manager of Legal Services

https://www.ontario.ca/page/public-sector-salary-disclosure-2017-organizations-no-salaries-disclose

"Still more sunshine around." By Ronald Zajac, Recorder and Times Monday, April 3, 2017.

Family and Children’s Services of Lanark, Leeds and Grenville contributed 14 names to the 2016 Sunshine List, led by former director of operations and innovation Kimberley Morrow, who earned $135,132.45 ($158.34 an hour), followed closely by the organization’s executive director Raymond Lemay, at $126,404.79 ($6,271.86 an hour).

Manager of Legal Services Karynn Von Cramon made $111,941.48 ($158.34 an hour).

Director of Corporate Services Jennifer Eastwood earned $114,935.99 ($158.34)

http://www.recorder.ca/2017/04/03/still-more-sunshine-around

President & Executive Director’s Report: FCSLLG is on the move.

Annual Report 2017–2018

On top of the children's aid societies of Ontario facing a record number of lawsuits in the next few years FCSLLG is nearly a million dollars in the hole this year and without the public's continued help reporting any suspicion of child abuse or neglect using our very own special lower threshold to meet reasonable grounds to report to our unqualified unregistered investigators we couldn't charge the taxpayers between $8000 and $12000 for every file we open and considering we can't force people to take a fake drug test anymore, without your donations we might have to take extreme measures to meet our funding goals...

(see: https://www.thestar.com/news/gta/2013/03/14/in_leaked_memo_peel_cas_staff_asked_to_keep_cases_open_to_retain_funding.html)

https://www.fcsllg.ca/wp-content/uploads/2018/10/FCSLLG-2018-annual-report.pdf

FCSLLG : Annual Report 2016–2017.

"Ontario's Family and Children's Services of Lanark, Leeds and Grenville is reporting going over budget $792,292 in what they're calling a budget shortfall then claim to be the victims in a ransomware attack...

Over the course of this year, one unexpected challenge the agency is still managing is related to a whistleblower informing the public to unprotected client information on our privately operated PUBLIC INFORMATION WEBSITE hosted on a US server (about as far from an internal server as you can get) that the agency was using as a sharing platform with other unnamed agencies and to make it easier for board members to access without a password. This challenge has remained an ongoing issue.

The costs associated with this breach and a totally unexpected massive increase in the costs of placements in group homes for the 198 children currently in our care led to an un-forecasted shortfall of about $792,292, though most of the increase is in the still mounting costs of stalling tactics, dirty tricks and corrupt lawyer fees in the upcoming $75 million dollar class action lawsuit - and this after many many years of generating enormous surpluses that we feel more than makes up for this unfortunate situation.

We continue to collude and collaborate with appropriate partners in the cover up and will continue to do so until all aspects of this matter are secretly resolved in the months ahead.

Any parties interested in reading the technical reports provided by FCSLLG's own expert on what really happened may not request or view the technical documents and you'll just have to take our word for what happened till it's revealed in the lawsuit.

There has also been much change in our management team with about half of the service managers being recently demoted and transferred away from front line positions.

Our leadership development activities are geared to prepare internal succession after no one answered our job "opportunities" ad, and all new managers have been in direct services with our organization – thus there is change but also continuity.

Over the past year a few employees have retired, some are off on maternity leave or suddenly left extended vacations while others have left to pursue their careers elsewhere like rats fleeing a sinking ship.

About 70% of our Family Services workers have less than 2 years of experience with the organization or anything beyond a general two year diploma in social work. The agency's other service functions have proven more stable though we're unable to say what they are.

Also the agency has preemptively requested that the Ministry of Child and Youth Services conduct a financial review.

FCSLLG : Annual Report 2016–2017:
https://www.fcsllg.ca/wp-content/uploads/2018/02/FCSLLG-Annual-Report-2016-2017.pdf
-
"Family and Children's services of Lanark, Leeds and Grenville faces $75 MILLION DOLLAR negligence suit."

By Sabrina Bedford, The Recorder and Times
Friday, December 15, 2017.

According to the suit, the personal information of the 285 clients was compiled into an electronic file, prepared for the service’s board of directors on new cases arising between April and November of 2015, but was not properly secured on the agency’s network.
This made the list publicly available to anyone, they said, and in her affidavit Denham explained how she came into possession of the sensitive and confidential documents.
She said she found and clicked on an unrelated document on the website intended for the public. She deleted a portion of the URL, and she was taken to a directory of folders with documents, within which she found the document with the names of local families.
She said she was never asked a username or password and was never faced with any security measures that impeded her ability to access the documents.
She said she attempted multiple times to advise the agency the confidential documents were available on the public website, beginning in February 2016, but the documents were still publicly available by late April 2016. This is when she decided to post the location of the report on the Facebook group where she claims she posted an image of a hyperlink, which was deleted by the group’s administrator within hours.

Lemay admits the report was on the FCSLLG's website but says it was hidden behind several layers of security including a password given only to the organization's board of directors.

"We suspect it was a hack. It might not have been a sophisticated one," says Mr. LeMay, the organization's executive director and I suspect that is the case," he adds.

"You have to go through the back door. You have to be looking for this," he says.

"The court process will determine whether there was negligence or not." I think that's the ultimate question.

Ms. Denham lodged complaints with both the Ministry and even Premier Kathleen Wynne's office, that personal information about the clients of Family and Children's Services of Lanark Leeds and Grenville, (FCSLLG) was accessible without password protection and that FCSLLG were fully aware that the information was readily accessible and unsecured. She also informed media both local and national. She exhausted every avenue to try to force FCSLLG to password protect the website or take it down. This informs all of us that we are powerless to protect our private information when we contact the proper authorities or the media. They were advised of the situation months prior and refused to protect the information on their website. They knowingly left the private information of their clients unprotected and only acted to shut down their website when Ms. Denham went public. Ms. Denham is a whistleblower, not a criminal.

An alleged privacy breach at Family and Children’s Services of Lanark, Leeds and Grenville (FCS) last year has led to the agency being sued for negligence, invasion of privacy and a breach of the Canadian Charter of Rights and Freedoms.

A multi-million-dollar class action lawsuit was filed in April 2016 against the agency as a result of a security breach that allegedly allowed for the names of 285 local children’s aid clients being published on Facebook, an offense made illegal under the Child and Family Services Act.

This week, lawyers for the plaintiff, named only as M.M., confirmed they filed a notice of motion in a Toronto courtroom to pursue claims of negligence, intrusion upon seclusion (invasion of personal privacy) and a breach of section 7 of the Charter (life, liberty and security of person) against FCS.

The suit initially alleged last year that someone hacked into the website to find the list, but lawyers for the plaintiff say an affidavit from Kelley Denham, the person who allegedly posted the location of the client list to Facebook and one of the defendants in the case, changed their course of action.
“We initially believed, based on quotes from (FCS executive director) Raymond Lemay and news reports, that this was a case of hacking of the secured FCSLLG website intended only for members of its board of directors,” Sean Brown, a lawyer with Flaherty McCarthy LLP who represents the plaintiff, told The Recorder and Times in an email.

“It now appears that this is not the case. Rather, it appears that the FCSLLG website was completely unsecured between February and April 2016, with the full knowledge of FCSLLG.”

The suit seeks $25 million in general damages, $25 million in special damages and $25 million in punitive, aggravated and exemplary damages.

According to the suit, the personal information of the 285 clients was compiled into an electronic file, prepared for the service’s board of directors on new cases arising between April and November of 2015, but was not properly secured on the agency’s network.

This made the list publicly available to anyone, they said, and in her affidavit Denham explained how she came into possession of the sensitive and confidential documents.

She said she found and clicked on an unrelated document on the website intended for the public. She deleted a portion of the URL, and she was taken to a directory of folders with documents, within which she found the document with the names of local families.

She said she was never asked a username or password and was never faced with any security measures that impeded her ability to access the documents.

She said she attempted multiple times to advise the agency the confidential documents were available on the public website, beginning in February 2016, but the documents were still publicly available by late April 2016. This is when she decided to post the location of the report on the Facebook group where she claims she posted an image of a hyperlink, which was deleted by the group’s administrator within hours.

She said she did not hack any secure portals, rather the site was completely unsecured and she was able to access the files unimpeded.

She is listed in the lawsuit as a defendant and is being charged with intrusion upon seclusion.

According to her own website KelleyandDerek.com, she is also being charged criminally for matters in relation to this case that are still before the court, including: Theft under $5,000, mischief over $5,000, mischief to data, unauthorized use of a computer, traffick in identity information, and publication of identifying information.

Brown said the evidence offered by Denham voluntarily in support of their notice of motion “directly contradicts the narrative pushed by FCSLLG at the time of this alleged breach.”

“Our own client, M.M., was not previously aware of the facts as alleged by Ms. Denham,” he said.

“She believed and accepted the version of events offered by FCSLLG. She was both surprised and upset to read Ms. Denham’s Affidavit and learn that the version of events offered by FCSLLG at the time may not be true.”

M.M., the plaintiff in the case representing the class action, wrote in an affidavit her family was the subject of a FCSLLG investigation for a brief period in April 2015. She said her file was soon closed and no action was taken against her family, and that the investigation was short-lived and found no wrongdoing on the part of her or her partner.

“I did not expect to hear from FCSLLG again,” she wrote in the affidavit.

But her name was included as one of the 285 made publicly available during the security breach, according to the suit.

“The knowledge that my name was disclosed in the breached report has caused me distress, anxiety and humiliation. I fear that the fact my family was the subject of an FCSLLG investigation will brand both myself and my partner as child abusers, when this is categorically and unequivocally not true.”
None of the allegations have been proven in court.

http://www.recorder.ca/2017/12/15/fcs-faces-negligence-suit
-
"Ministry CyberSecurity Experts Swoop in to Add Security, Plug Holes and Wipe Malware."

Lemay says his agency didn’t pay up. He says it used an offline backup of computer files to get the agency up and running again in about eight hours.

Lemay says the ransomware attack cost his agency $100,000 to fix, an expense covered by his agency’s “cyber insurance.”

https://www.thestar.com/news/insight/2018/02/22/ransomware-attacks-hit-two-ontario-childrens-aid-societies.html

No comments:

Post a Comment