A notice to CG Clients Regarding the InvestorCom GoAnywhere Cybersecurity Incident

In February 2023, software developer Fortra disclosed that a zero-day vulnerability was discovered in its GoAnywhere MFT (Managed File Transfer) application.   

It has been widely reported that this vulnerability was exploited across more than 130 public and private sector organizations globally. According to a statement posted on May 1, 2023, one of the impacted organizations was InvestorCOM, a provider of regulatory compliance software and communications solutions for the financial services industry. You can read InvestorCOM’s statement in this link.

Importantly, there has not been any direct breach of Canaccord Genuity’s systems.

The GoAnywhere software is not used in any component of CG’s systems or platforms, or in the support environments that we provide to our clients.

How does this impact clients of Canaccord Genuity Wealth Management?

We have recently learned that some asset and fund managers who use InvestorCOM’s technology solutions for secure data transfer such as print and delivery of client materials have been exposed to this vulnerability. Some of these asset and fund management firms distribute their products through various wealth management firms in Canada, including CG Wealth Management.

It is possible that your personal information has been exposed through this breach.

How will I know if my personal data has been accessed?

Impacted asset and fund managers are responsible for notifying impacted individuals directly. To date, certain asset and fund managers have advised us of their intention to communicate to impacted individuals directly, using the contact information that has been provided in your documentation.

Please note that we have received no evidence of the misuse, or attempted misuse of any impacted information.

How can I protect myself in the future?

Financial institutions have a responsibility to safeguard your information, but in a world of rapid technological change and increased cyber threats, even the most sophisticated protocols can’t prevent all instances of cybercrime.

Important steps that you can take to reduce personal risk include:

•  Using strong passwords and enabling multi-factor authentication when available

• Keeping your personal devices secure

• Keeping an eye on your credit score and monitoring for any unusual activity

• Obtaining identity theft insurance

At CG, the security and integrity of our client and employee data is a critical business priority for all of us. We regularly review our operating practices and cybersecurity program as part of our commitment to continuous improvement in safeguarding the information that you have entrusted to us.

Please feel welcome to contact your personal investment advisor with any questions.

Thank you for your continued support.