N.S. premier rejects Tory call for minister’s resignation over breach
Nova Scotia’s Opposition Tories called Friday for the resignation of Internal Services minister Patricia Arab over a breach of the province’s freedom-of-information internet portal - a demand swiftly rejected by Premier Stephen McNeil.
Karla MacFarlane, the party’s interim leader, asked Arab in the legislature whether she would resign given her department had failed to ensure the protection of the public’s personal information.
“It wasn’t an elaborate hack that exposed this information,” said MacFarlane. “The minister chose to protect her government rather than Nova Scotians . . . will she resign today?”
Arab replied that she “serves at the pleasure of the premier.”
“Right now, my focus is on contacting the individuals who have been impacted by this breach,” she said.
McNeil said he had “all confidence” in Arab. It was a phrase he repeated again for reporters following question period.
“The minister has handled this very professionally,” he said. “Immediately upon being notified she put her department to work and we are now in a position where somebody has been in custody and we are now reaching out to those individuals whose information has been breached.”
When asked whether he thought the situation approached the threshold for a resignation McNeil simply replied, “No.”
Halifax police arrested a 19-year-old man on Wednesday, who faces the seldom laid charge of unauthorized use of a computer.
The government says about 7,000 documents were inappropriately accessed between March 3 and March 5, with about 250 containing highly sensitive personal information such as birth dates, social insurance numbers, addresses and government services’ client information.
The admission came nearly a week after the problem was first noticed by a provincial employee who entered a mistaken keystroke while doing research. The portal was shut down on April 5.
Arab said proper protocol was followed, but that was disputed by MacFarlane who noted the official protocol calls for the notification of those affected as soon as possible and as long as it doesn’t affect a police investigation. Halifax police have confirmed that they didn’t ask for a delay.
MacFarlane also said Arab’s department had ignored past warnings from the province’s auditor general that the government’s computer systems aren’t secure enough.
“Obviously they have not met the criteria that was needed to secure this site,” she said. “There is a lot of vulnerability and it is the minister’s responsibility.”
The government has said the documents were accessed through a “vulnerability in its system” and not through a hack. Officials said someone changed the URL and wrote a script of computer code that allowed them to sequentially access “every document available on the portal.”
In an interview Thursday, privacy lawyer David Fraser said if the same function used to access public documents can be used to get at confidential information then the current portal is the “wrong tool for the job.”
He also questioned whether the incident was a security breach at all, saying the ease of accessing the private information raised questions about whether a security system was present, “in the first place.”