Annex 5 - SIN At Risk: Sample Notification Letter for Organizations

(Based on the Consumer Measures Committee website information (cmcweb.ca)

Date _______________

Dear _______________

We regret to inform you that the security of a database containing some of your personal information may have been put at risk. Please accept our apologies for this breach in security and rest assured we are doing everything possible to minimize the damage this could cause. Describe the information that has been put at risk and how you are dealing with it.

If you are concerned about protecting your Social Insurance Number (SIN), call Service Canada's Social Insurance Registration Office at 1-800-206-7218 (English) or 1-800-808-6352 (French) and select “option 3” for SIN information. You can also get information about the SIN at Service Canada website.

Canada's major credit reporting agencies, Equifax and TransUnion, have been notified of this breach and have provided the following reference code: XXXXX. This number should be referred to in any communication with them. They recommend you call their agents to discuss whether a fraud alert should be placed on your credit file and what other steps are required (Equifax: 1-800-465-7166 and TransUnion Canada: 1-800-663-9980 (1-877-713-3393 for residents of Québec)).

A fraud alert tells creditors to contact you before they extend credit, open a new account or change your existing accounts. You should be aware that while most creditors will call you, they are not obliged by law to do so, which explains why it is not fail-proof protection. As soon as you become aware of it, report any unauthorized activity on your account to your financial institution, the credit reporting and law enforcement agencies, and The Canadian Anti-fraud Call Centre (a national anti-fraud call centre, at 1-888-495-8501).

A police report has been prepared on this incident: number YYYYY. Your financial institution or other creditors may require the police report to clear you of any fraudulent charges that could occur.

With appropriate identification, you can also ask that a copy of your credit report be mailed from the credit reporting agencies to you, free of charge. Visit their websites for details on what is acceptable identification. If you receive a copy of your report and do not find any unauthorized activity, it is recommended that you continue to check your credit reports periodically.

We recommend that you take these precautions to reduce the risk of financial losses or your information being used for illegal purposes.

We suggest you visit www.cmcweb.ca/idtheft to obtain information on identity theft including:

  • Tips for Reducing the Risk of Identity Theft
  • What to Do if it Happens to You
  • Identity Theft Statement
  • Frequently Asked Questions
  • Consumer Identity Theft Checklist

Our organization's information officer is (insert name of person responsible for administration related to breach) and can be contacted at (telephone number and address if applicable) if you have any questions.

Once again, we regret any trouble this incident may cause you, and assure you we are taking steps to prevent anything like it from happening again.

Navigation within the document