Public Information Alert: Keylogger devices found

Public Information Alert: Keylogger devices found on some public use computers at Guildford and City Centre branches of Surrey Libraries

Update: On April 12, 2023 a keylogger device was discovered at the second floor public stations of the City Centre branch. If you think you may have used an affected computer between April 6 and April 11, please refer to the steps listed below.

Update: On February 15, 2023 additional keylogger devices were discovered at the second floor public stations of the City Centre branch. If you think you may have used an affected computer between February 6 and February 14, please refer to the steps listed below.

Hardware devices called keyloggers, which can capture computer keyboard keystrokes, were recently found on a few Surrey Libraries’ public use computers at Guildford and City Centre branches. The affected computers were located on the main floor public stations at Guildford, and on the second and third floor public stations at City Centre. The keylogger devices were plugged in without Surrey Libraries’ knowledge or authorization.

In response, Surrey Libraries has launched a thorough investigation, filed a report with law enforcement, and notified the Office of Information & Privacy Commissioner for British Columbia. The Library is now regularly inspecting computers for tampering. The integrity of the computers, networks and the security of Surrey Libraries systems remain intact.

Surrey Libraries currently has no information about the extent to which the keyloggers gained information or whether any information, if collected, has been used. However, because user activity on affected computers may have been tracked, Surrey Libraries strongly advises that, as a precautionary measure, if you think you may have used an affected computer at City Centre or Guildford over the last year, you should:

• Change your passwords associated with any accounts you may have accessed, especially sensitive ones such as for online banking.
• Carefully review your bank and credit card accounts and statements and report any suspicious activity or transactions.

If you believe any of your accounts have been compromised, you may also wish to:

• Contact Surrey RCMP at 604-599-0502 to file a report
• Request a free fraud alert for your credit file with a credit reporting agency such as Equifax
  (1-866-828-5961) or TransUnion
• Notify the Canada Revenue Agency of potential fraud (1-800-959-8281 and select the option “report suspected fraud or identity theft” to prioritize your call to speak to a specialized agent as quickly as possible)

Surrey Libraries thanks you for your patience and sincerely apologizes for any inconvenience this incident may cause.

If you have any questions related to this notice, please contact the Director of Administrative Services at Surrey Libraries: MHo@surrey.ca or call 604-598-7303.

The protocol of the Office of the Information and Privacy Commissioner for BC was followed in providing this information. If you have concerns about the manner in which this information has been shared, you can contact the Information and Privacy Commissioner of British Columbia at:

Office of the Information and Privacy Commissioner for British Columbia

www.oipc.bc.ca

Email: info@oipc.bc.ca / Tel. (250) 387-5629 / Fax (250) 387-1696

P.O. Box 9038, Stn. Prov. Govt.

Victoria, B.C. V8W 9A4