UNAUTHORIZED SERVER ACCESS INCIDENT
Early on September 10, 2021, we became aware of a cybersecurity incident involving apparent unauthorized access to our servers by one or more individuals associated with an international cybercriminal organization. In particular, our email server is believed to have been breached through a MicrosoftTM vulnerability around September 7, 2021. Our team immediately took steps to secure our systems and mitigate the impact to our data and operations, including shutting down servers, work stations, and domains.
We engaged Field EffectTM – a cybersecurity software company – to immediately scan the system and implement a new software security platform. This platform enabled our team to build new servers with clean security systems so we could start to employ the unaffected back-ups. The new system is monitored 24/7 both electronically and physically.
After extensive investigation, our head of data security has found no evidence to confirm nor refute the unauthorized access of anyone’s personal data as a result of this incident.
Those affected by the breach include:
- Former and current staff of Big White Ski Resort Ltd.
- Vendors and suppliers
- Property owners represented by Big White Central Reservations Ltd.
- On-mountain residents who use Big White Utilities (water and sewer)
Those who have used a credit card and personal information to purchase from Big White Ski Resort Ltd. are not affected by this unauthorized access incident. We have attempted to send notifications to everyone whose data may have been affected by the incident and are recommending that they monitor their financial statements for any suspicious activity and remain vigilant for any suspicious emails seeking additional personal or banking information. However, we may not have current contact information on file for some affected individuals. If you believe your personal information may have been affected by this incident and you have not received a notification letter from us, please use the links below to learn more about what personal data may have been affected based on the category applicable to you:
Current & Former Employees of Big White Ski Resort
Customers of Big White Utilities Property
Owners with Big White Central Reservations
Vendors and Suppliers of Big White Ski Resort
We are committed to data security and are taking this matter very seriously. We are continuing to work with the appropriate law enforcement authorities in the investigation and we will provide further updates as appropriate if additional material information becomes available.