As previously communicated, Cornerstone Credit Union was recently impacted by a cybersecurity incident that was experienced by one of our managed service providers.

Please be assured that there is no evidence that any personal information was misused and key systems accessing member accounts, being our core banking and digital (online & mobile) banking were not affected, as well as communication channels such as email.

Out of an abundance of caution, we want to make our members aware that unknown individuals may have gained unauthorized access to some personal information as a result of this incident.

Cornerstone Credit Union takes the privacy and protection of your information extremely seriously.  

IMPORTANT MEMBER UPDATE
Notice of Cybersecurity Incident

    Cornerstone Credit Union (“Cornerstone”) takes the privacy and security of its members very seriously.

    To that end, we want to provide an important update on a recent cybersecurity incident experienced by a managed services provider that offers a range of information technology and related services to Cornerstone. As previously communicated, the cybersecurity incident impacted Cornerstone and resulted in us commencing our own investigation and response to this incident, as set out further below.

    What Happened 

    On June 8, 2022, the managed services provider notified us that they had experienced a cybersecurity incident. They confirmed that they took immediate action to block the incident to limit the impact on their clients and began investigating to assess what information may have been compromised.

    Out of an abundance of caution, we also launched an investigation into this incident. From this investigation, we have implemented additional security measures to further protect your information.

    What Information Was Involved 

    There is no evidence that any personal information was misused as a result of this incident, and given the immediate and comprehensive actions taken, we consider the risk to members low. Key systems to access member accounts, such as our core banking system and digital banking, as well as communication systems such as email, were unaffected. However, as a precautionary measure, we wanted to let you know that some of our employees’ and members’ personal information may have been accessed during the incident. For some members, this may include name, member number, account number, date of birth (DOB), or social insurance number (SIN).

    What We Are Doing 

    We have alerted law enforcement and appropriate privacy commissioners and have engaged leading cybersecurity experts to support the investigation and our response.

    As a precautionary measure, we wanted to notify you and also offer you complimentary identity theft and credit monitoring solutions free of charge for 24 months from TransUnion. Through this, you will be able to receive regular alerts to notify you if there are significant changes to your credit report.

    If you would like more information on this incident and/or you are interested in this service, please send an email to memberfeedback@cornerstonecu.com or call 1.855.875.2255 to access it.

    In order to protect against fraudulent access to credit report information, you will be subject to a verification and authentication process.

    What You Can Do 

    While there is no evidence that any personal information was misused as a result of this incident, we always recommend that members take the following additional steps to protect yourself and your information online:  

    • Monitor your financial accounts with care. If you see any transactions you do not understand or that appear suspicious, or if you suspect fraudulent activity has occurred involving a credit or debit card, contact your financial institution. 
    • Regularly change and create strong passwords for any online accounts, particularly those that use or relate to your social insurance number. 
    • Be cautious of any unsolicited communication (phone call, email, etc.) that asks for your personal information or refers you to a Web page asking for personal information.
    • Do not click on links or provide money or confidential information where you cannot independently verify the authenticity of a request. 
    • Clear your browsing history regularly and at the conclusion of any online banking or other transactions where you make online purchases.  
    • Sign up for banking alerts that will notify you when your password has been changed or your bank account has been accessed/used. 
    • Contact the appropriate authorities if you notice any suspicious activity. 
    • Sign up for the credit monitoring services being offered above. 

    Additional tips and resources for protecting your identity are available at: https://www.ic.gc.ca/eic/site/Oca-bc.nsf/eng/ca03025.html 

    For More Information 

    We know you may have more questions, and we are here to support you. Please email memberfeedback@cornerstonecu.com or call 1.855.875.2255.

    We take this incident, and the privacy and protection of your information, extremely seriously. We are profoundly grateful for your understanding and support, and we regret any impact this incident may have had.

    Thank you for your trust and support.

    Sincerely, 

    Doug Jones
    CEO
    Cornerstone Credit Union 



    INCIDENT FAQs

    On June 8, 2022, a managed services provider notified us that they had experienced a cybersecurity incident. They confirmed that they took immediate action to block the incident to limit the impact on their clients and began investigating to assess what information may have been compromised.

    Out of an abundance of caution, we also launched an investigation into this incident. From this investigation, we have implemented additional security measures to further protect your information. 
     

    On June 8, 2022, a managed services provider notified us that they had experienced a cybersecurity incident. They confirmed that they took immediate action to block the incident to limit the impact on their clients and began investigating to assess what information may have been compromised.  

    It was a cybersecurity incident that originated within a managed service provider we contract with for information technology services. 

    We were impacted by a cybersecurity incident experienced by a managed services provider that offers a range of information technology and related services to Cornerstone. 


    Out of an abundance of caution, we launched an investigation into this incident. From this investigation, we have implemented additional security measures to further protect your information.

    We have alerted law enforcement and appropriate privacy commissioners and have engaged leading cyber security experts to support the investigation and our response.

    While we have no evidence that personal information was misused as a result of this incident, out of an abundance of caution, we are also offering members and employees complimentary identity theft and credit monitoring solutions free of charge for 24 months from TransUnion. Through this, they will be able to receive regular alerts to notify you if there are significant changes to your credit report. If interested in this service, please send an email to memberfeedback@cornerstonecu.com or call 1.855.875.2255 to access it.   


    There is no evidence that any personal information was misused as a result of this incident, and given the immediate and comprehensive actions taken, we consider the risk to members low. 

    We have no evidence that member information was misused and given the immediate and comprehensive action taken, we consider the risk to members low. Key systems accessing member accounts being, core banking and digital (online & mobile) banking systems were not impacted, as well as communication channels such as email.  However, for some members, some information may have been accessed including, name, member number, account number, date of birth (DOB), or social insurance number (SIN). If you would like to discuss this further, please email memberfeedback@cornerstonecu.com or call 1.855.875.2255.

    While there is no evidence that any personal information was misused as a result of this incident, we always recommend that members take the following additional steps to protect yourself and your information online:  

    • Monitor your financial accounts with care. If you see any transactions you do not understand or that appear suspicious, or if you suspect fraudulent activity has occurred involving a credit or debit card, contact your financial institution. 
    • Regularly change and create strong passwords for any online accounts, particularly those that use or relate to your social insurance number. 
    • Be cautious of any unsolicited communication (phone call, email, etc.) that asks for your personal information or refers you to a Web page asking for personal information.  
    • Do not click on links, provide money, or confidential information where you cannot independently verify the authenticity of a request. 
    • Clear your browsing history regularly and at the conclusion of any online banking or other transactions where you make online purchases.  
    • Sign up for banking alerts that will notify you when your password has been changed or your bank account has been accessed/used. 
    • Contact the appropriate authorities if you notice any suspicious activity. 
    • Sign up for the credit monitoring services being offered above. 


    Additional tips and resources for protecting your identity are available at:
    https://www.ic.gc.ca/eic/site/Oca-bc.nsf/eng/ca03025.html 

    To access complimentary identity theft and credit monitoring solutions free of charge for 24 months from TransUnion, please send an email to memberfeedback@cornerstonecu.com or call 1.855.875.2255 to access it.

    In order to protect against fraudulent access to credit report information, you will be subject to a verification and authentication process.  

    We know you may have more questions, and we are here to support you. Please contact email memberfeedback@cornerstonecu.com or call 1.855.875.2255. 

    This website uses cookies to improve your experience on our website. By continuing to browse the site you are agreeing to our use of cookies.