Residential school survivors privacy breach claim recanted

The head of the agency handling the compensation claims of residential school survivors says he was the person recently contacted by a "disgruntled" individual claiming to have obtained the personal information of those who have applied for compensation due to abuse suffered in residential schools.

In a letter sent to NDP MP Charlie Angus dated April 4, Dan Shapiro, the chief adjudicator at the Indian Residential Schools Adjudication Secretariat, says he was contacted on March 12 by an individualclaiming to have information relating to claims made by residential school survivors.

• Visit CBC Aboriginal for more top stories

This is the same individualwho in 2012made a similar claim. The agency investigated the claim at the time and concluded no breach had occurred.

"I was unexpectedly contacted by phone, by the same individual saying, again, that he may have informationrelatedto Independent Assessment Processclaims obtained from the home of an adjudicator," Shapiro said.

The individualhas since recanted his claim saying hedid not actually have any information related to the claims of residential school survivors, Shapiro said.

"He has also indicated that he is disgruntled with the adjudicator and is motivated to see the adjudicator removed from the job," Shapiro said.

In his letter to Angus, Shapiro said the agency has "at no time received credible evidence that the individual does in fact have any confidential information."

"Rather, what we have received are unsupported statements from a disgruntled individualwho has admitted his motivation to harm the adjudicator," said Shapiro.

CBC News reported on March 27that the Office ofthe Privacy Commissioner was asked to look into a possible breach of privacy, after an adjudicator working for the agency handling their compensation claims filed a police report citing blackmail.

Shapiro saidthat while the agency itselfhas not fileda police report, it has made "a request to the Chief of Police that the matter be investigated."

It is not known in what city the incident occurred. A spokesperson for Shapiro told CBC News on Wednesday the agency did not want to comment on its discussions with police and that it did not see the usefulness in releasing such information at this time.

The latest details of this case come afterAngus wrote to Shapiroon March 27 asking him to make publicthe details of the incident.

"I was pleased to receive a timely and thorough response,"Angus told CBC News in an email on Wednesday.

The agency takes the privacy of claimants "very seriously," Shapiro said.

The adjudicators who are under contract for the agency, according to Shapiro, are provided with security training and must adhere to strict security requirements such as:

• The use of encrypted computers and encrypted USB keys.
• The use of encrypted tape recorders to record hearings.
• Ensuring that all documents and digital files are stored and transported in accordance with measures designed to ensure that personal information is not released, even in the event of a theft or loss of equipment.

Secretariat investigates possible security breach

While the "disgruntled" individual has since recanted his claim, Shapiro posted a notice onthe Secretariat web site on Tuesday to inform claimants that the agencycontinues to investigate a possible security breach.

"We are still looking into the matter, and are not in a position yet to confirm whether any information was stolen," Shapiro said in the notice posted on the agency's web site.

Shapiro said his agency has reported the matter to the Office of the Privacy Commissioner and is working closely with the privacy watchdog to determine the next steps.

"We have also been in touch with the police about the possible theft of information from the Secretariat, however we have no evidence at this time that anything has been stolen," Shapiro said.

"As we gather more information about the possible breach and determine whether any personal data was compromised, we will decide on an appropriate course of action in close consultation with the privacy commissioner."

"We sincerely regret any anxiety or concerns this matter may cause to claimants," Shapiro said.