Oikos Unwrap to Play contest - Important message from Danone Canada

I just received this warning message in my email.

Oikos Unwrap to Play contest - Important message from Danone Canada

Dear contestant, 

Based on the findings of an investigation following irregular activity associated with the contest database Unwrap to Play from Oikos on December 8, 2014, Danone Canada conducted an independent and thorough cyber-forensics investigation which confirmed, on February 11, 2015, that a third-party has hacked the contest database hosted by an outsourced provider, which contains participants’ personal information such as:

• Name,
• Addresses,
• Birth dates,
• Email addresses,
• Profile information (gender, number of children and yogurt preference), and
• Password.

It did not include more sensitive or financial information such as:

• Credit card numbers, 
• Bank account numbers, 
• Driver’s license numbers, or 
• Social insurance numbers. 

This notification is to advise you of the situation and to encourage you to remain vigilant.

As Danone Canada is committed to the security of consumer’s personal information, we immediately addressed the situation: we tackled the security breach, reported the incident to the authorities and conducted an independent and thorough cyber-forensics investigation to understand the causes of the incident and hopefully avoid any similar situations in the future.

As preventive measure, we do recommend that you be alert for emails scams and marketing campaigns from unauthorized third parties that could reference your participation to the contest and may try to trick you to provide personal information. For information on how to avoid emails scams and protect your information online, you can type www.priv.gc.ca/resource/fs-fi/02_05_d_13_rev_01_e.asp into your web browser.

In addition, we encourage you to remain vigilant and to review and monitor your personal accounts for suspicious or unauthorized activity. If you have reason to believe that your information is being misused, you should report unusual activity to local law enforcement. For additional tips on how to combat ID theft and steps to take if you become a victim, you can type www.priv.gc.ca/resource/fs-fi/02_05_d_10_e.aspinto your web browser.

You should also change your password in other accounts as a preventive measure, if you use the same one as you did for the Oikos Unwrap to Play contest.

The investigation remains in progress and we are collaborating with local law enforcement. We have also notified the federal and provincial privacy commissioner’s offices so that they are aware of this incident and can assist you with any questions that you may have. You may also contact these privacy commissioner’s offices as follows:

Privacy Commissioner of Canada 112, Kent Street Place de Ville Tower B, 3rd Floor Ottawa, Ontario K1A 1H3 Toll-free: 1-800-282-1376	Commission d'accès à l'information du Québec (CAI)  500, boul. René-Lévesque Ouest Montréal (Québec) H2Z 1W7 Telephone: (514) 873-4196
Office of the Information and Privacy Commissioner (Alberta) #2460, 801 – 6th Avenue SW Calgary, Alberta T2P 3W2 Telephone: (403) 297-2728	Office of the Information and Privacy Commissioner (British Columbia)  P.O. Box 9038 Stn. Prov. Govt. Victoria B.C. V8W 9A4 Telephone: (250) 387-5629

We greatly value our relationship with you and truly regret this incident.

And as we remain focused on addressing your questions and concerns, please do not hesitate to contact our Consumer Care Center via the form on our website or at 1-800-DANONE-8 (1-800-326-6638), 7 days a week, from 8h AM to 9h PM, standard Eastern Time.

Michèle Morin
Consumer Care Center
Danone Canada