FIREARMS FACTS - UPDATE

NINETEEN CONFIRMED

BREACHES OF CPIC IN 2002

RCMP RESPONSE TO ACCESS TO INFORMATION ACT REQUEST

FILE: 03ATIP-20402 dated September 3, 2003

BREITKREUZ ATI REQUEST – May 21, 2003

Reference is being made to the response to RCMP File: 02ATIP-08379 dated April 19, 2002.  From January 1, 1995 to present, please provide copies of reports and correspondence documenting the effectiveness of privacy protection and computer security in the Canadian Police Information Centre - CPIC system.  These reports should include information such as: (1) the number of instances that private and personal information has been released to unauthorized persons and organizations; (2) a list of the unauthorized organizations receiving the CPIC information; (3) a list of the types and frequency of private and personal information released; (4) the number of police officers and police personnel that have been reprimanded, dismissed and charged for misuse of CPIC information; and (5) the number of attempted and successful breaches of the CPIC computer systems and how this information on breaches was verified and validated.

RCMP RESPONSE  – September 1, 2003

Based on the information provided, a search for records was conducted in Ottawa, Ontario.  Enclosed is a copy of all the information to which you are entitled.  Please note that we do not have information in response to numbers 2 and 3 of your request.  In response to question number 5 of your request: There have not been any successful breaches of the CPIC system.

RCMP CAN’T BACK-UP THEIR STATEMENT THAT CPIC COMPUTERS HAVE NEVER BEEN HACKED

http://www.cssa-cila.org/garryb/publications/CPIChacked.htm

SEE RCMP TABLE ON NEXT PAGE DOCUMENTING

CPIC BREACHES FOR 2002

POSSIBLE BREACHES OF THE CPIC SYSTEM

FOR THE YEAR OF 2002

NUMBER OF KNOWN BREACHES OF POLICE INFORMATION SYSTEM - 221

Documented as of: March 01, 2002

http://www.cssa-cila.org/garryb/publications/CPICBreaches-2002-04-19.pdf

http://www.cssa-cila.org/garryb/publications/LettertoPrivacyComm01.pdf