Cyber Incident Update

As previously indicated the recent cyber incident has affected some of our IT systems and our non-emergency functions. While a timeline for recovery is evolving, the Kingston Police is committed to resolving the situation as efficiently and effectively as possible, and we have the right resources in place to do so.

Following the cyber incident our focus has been on restoration, containment and investigation. Like many other organizations our operation utilizes many systems. Upon some of these systems being disrupted we immediately transitioned to alternate systems to ensure seamless continuity in our record keeping and service delivery.  

Prior to the implementation of some of the systems that were affected, such as our scheduling software and our motor vehicle collision reporting, our organization operated without these systems. Although in many cases these systems offer superior efficiency, we have been able to continue operating without them and our ability to respond to emergency calls for service has continued.

With the incident contained and the delivery of core systems ongoing, we are now focused on preparing systems to be restored, returning systems to their pre-incident state, as well as upgrading, replacing and enhancing systems to be more resilient.  

We want to emphasize to the public that we take this matter very seriously and are working closely with our government and enforcement partners to investigate the incident and to restore services. We have also notified the Kingston Police Service Board, the Mayor and the City of Kingston who are working to support us in every way they can.

Our top priority is to serve and protect the Citizens of Kingston. We are following a response plan to manage the incident as quickly and effectively as possible. We are continuing to cooperate with the Information and Privacy Commissioner of Ontario. 

In remaining cognizant of the ongoing cyber incident investigation being conducted by the O.P.P, we will provide further updates as soon as it is safe and secure to do so. We appreciate the public’s ongoing patience and understanding during this time.

Cyber incidents can serve as a reminder for all of us to protect ourselves online.

We recommend the following as general best practice in protecting yourself and your information online, anytime, and unrelated specifically to our incident: 

•    Monitor your financial accounts with care. If you see any transactions, you do not understand or that appear suspicious, or if you suspect fraudulent activity has occurred involving a credit or debit card, contact your financial institution.

•    Regularly change and create strong passwords for any online accounts, particularly those that use or relate to your social insurance number.

•    Be cautious of any unsolicited communication (phone call, email, etc.) that asks for your personal information or refers you to a Web page asking for personal information. 

•    Do not click on links, provide money, or confidential information where you cannot independently verify the authenticity of a request.

•    Clear your browsing history regularly and at the conclusion of any online banking or other transactions where you make online purchases. 

•    Sign up for banking alerts that will notify you when your password has been changed or your bank account has been accessed/used.

•    Contact the appropriate authorities if you notice any suspicious activity.