Cyberattack on House of Commons: Threat Actor Exploits Microsoft Vulnerability to Gain Unauthorized Access to Employee Data

The House of Commons has been hit by a cyberattack from an unknown "threat actor" who exploited a Microsoft vulnerability to gain unauthorized access to employee information. The breach includes names, job titles, office locations, and email addresses, as well as information regarding House of Commons-managed computers and mobile devices. Canada's cybersecurity agency, the Communications Security Establishment, is investigating and working with the House of Commons to provide support. Attribution of the attack is difficult and may take time.