The federal government is paying $900 million to settle multiple class-action lawsuits lodged on behalf of survivors of sexual harassment, gender discrimination and sexual assault in the military.Jeff McIntosh/The Canadian Press
The company administering the federal government’s $900-million settlement deal with Armed Forces members and veterans who experienced sexual misconduct while in uniform has inadvertently released private information about dozens of claimants.
Epiq Class Action Services Canada confirmed the privacy breach on Wednesday, after a veteran said she had received an e-mail last week containing letters intended for more than 40 other people.
Retired master corporal Amy Green said she was shocked when she discovered she had been sent names, e-mail addresses and claim numbers, which she said is enough information to access certain parts of a claimant’s file.
What the Canadian military’s sexual-misconduct apology means to me
“If I wanted to, I could just log in and upload anything to their file because I have their e-mail address and their claimant ID,” said Green, who left the military in 2014 and now lives in London, Ont. “So I could tamper with anything.”
The Federal Court appointed Epiq to administer the settlement process after the government reached an agreement in November 2019 with plaintiffs in three overlapping class-action lawsuits dealing with sexual misconduct in the military.
In response to a request for comment, Epiq spokeswoman Angela Hoidas said “limited information” about fewer than 100 of the 20,000 people who have applied for compensation were sent to another claimant.
“Epiq’s investigation found that the inadvertent disclosure was caused by human error,” Hoidas said in an e-mail. “We promptly implemented new procedures to ensure this does not happen again and have taken the appropriate disciplinary action.”
She went on to say that all those whose personal information was disclosed have been contacted, and that the company “fully understands the importance of protecting personal information and sincerely regrets this error.”
Green nonetheless expressed concern about the mistake, particularly given the nature of the claims and settlement deal. She also said that despite the company’s assurances, she continues to harbour questions and concerns about the scope of the breach.
“Is this a one-off and am I the only one who received it?” Green asked. “It should never have happened. Even one is too many.”
She added she doesn’t know what to do with the email. However, while some people have suggested she seek legal counsel, she said she will likely delete it once she is sure what Epiq says about the limited scope of the privacy breach is true.
“I don’t want it, I don’t even want to look at it,” she said. “It makes me uncomfortable to have it.”
Toronto lawyer Jonathan Ptak, who represented some of the plaintiffs involved in the lawsuits, said Wednesday that Epiq had only just notified counsel about the privacy breach involving some members of the settlement agreement.
“Privacy is of the utmost importance and this issue is being fully investigated,” he said in an e-mail. “We have been advised that urgent steps are being taken by the administrator to prevent any further disclosure and to ensure that this does not occur again.”
Veterans Affairs Canada referred questions to the Department of National Defence, which did not immediately respond to requests for comment.
Our Morning Update and Evening Update newsletters are written by Globe editors, giving you a concise summary of the day’s most important headlines. Sign up today.