Union ‘increasingly alarmed’ about Indigo cyberattack, demands further disclosure | CBC News

A union representing 200 employees of Indigo Books & Music Inc. is calling on the retailer to disclose more information about the scope of its recent data breach and offer additional support to staff affected.

United Food and Commercial Workers International Union Local 1006A says it is “increasingly alarmed” by new information that has come to light about a Feb. 8 cyberattack on Canada’s biggest bookstore.

The union says it is concerned that current and former Indigo workers, who learned this week that their medical and immigration data were part of the breach, still have several unanswered questions.

Those include whether the company is aware of any unauthorized use of personal info and what measures it is undertaking to better safeguard data.

The union demanded answers to these questions in a letter it says it sent to Indigo that also asked the company to support workers who may face identity theft or other damages because of the attack.

Indigo offered staff two years of credit monitoring last month as it grappled with the attack it blamed on a ransomware software known as LockBit.