Notice of Data Security Incident

On May 9, 2023, we discovered that an unauthorized third party gained access to a limited portion of our IT infrastructure, temporarily affecting some of our systems and rendering them inaccessible. Upon discovering the incident, we immediately retained third party cybersecurity experts to assist with containment, remediation and to conduct a forensic investigation.

Our investigation has determined that information belonging to our clients including name, address, date of birth, legal communications and any information that was provided to us to provide legal services may have been exposed in this incident.

We have made an effort to contact all of our current clients. However, we may not have current contact information for all affected clients.

We want to stress that as of the date of this notice, we are not aware of any information being used to carry out identity theft and/or fraud. Nonetheless, we remind you that it is important to be vigilant regarding suspicious activity or incidents of potential fraud or identity theft (to the extent you have provided personal information to us) by monitoring your financial accounts and credit reports regularly. You can obtain a free copy of your credit report at any time by contacting the two Canadian credit reporting agencies, Equifax and TransUnion, directly. You may also wish to place a fraud alert on your credit file with those reporting agencies. To do so, please contact them directly.

• Equifax Canada, Consumer Relations Department, P.O. Box 190, Station Jean-Talon, Montreal, QC H1S 2Z2, 1-800-465-7166, www.equifax.ca
• TransUnion Canada, Consumer Relations Centre, P.O. Box 338, LCD 1, Hamilton, ON L8L 7W2, 1-800-663-9980, www.transunion.ca

Additional measures you can take to protect yourself include the following:

• If you receive communications in the days ahead purporting to be from CBE asking for financial or personal information that you were not expecting, please consider the communications to be fraudulent, and contact us immediately.
• Never respond to any unsolicited requests for financial or personal information.
• Remain vigilant and report any suspicious activity to the appropriate authorities.
• Avoiding clicking on links or downloading attachments in suspicious emails.

We want to assure you that we are taking this incident very seriously and as an opportunity to review our security policies and practices to ensure a similar incident does not occur again in the future. We value the trust of our clients and sincerely regret any inconvenience this incident may have caused.

If you have questions regarding this incident, please contact privacy@cbelaw.com .