Winnipeg city data breach - how to report

Technology and Data Manitoba 3 Minutes Read · published February 11, 2026 Flag of Manitoba

In Winnipeg, Manitoba, residents who suspect a City data breach should notify the City’s Access and Privacy office and consider provincial oversight options. This guide explains how to report suspected breaches affecting personal information held by municipal departments, what to expect from enforcement and appeals, and practical steps to protect yourself after a breach.

What counts as a city data breach

A data breach can include unauthorized access, loss, theft, or disclosure of personal information held by the City of Winnipeg or its service providers. Examples include lost devices with resident records, email misdirected to third parties, or an unsecured database accessible from the internet.

Report suspected breaches quickly to preserve evidence.

Immediate steps to take

  • Contact the City of Winnipeg Access and Privacy office to report the incident and get instructions.
  • Document what happened: times, affected records, screenshots, and names of city staff you contacted.
  • Secure your accounts: change passwords, enable multi-factor authentication, and monitor financial statements.
  • Preserve evidence: do not alter logs or delete related files unless directed by investigators.

Penalties & Enforcement

The City of Winnipeg’s Access and Privacy office investigates breaches involving municipal records and coordinates corrective measures. Provincial oversight or complaint review may be available through the Manitoba Ombudsman for municipal privacy issues.

  • Fines and monetary penalties: not specified on the cited page.
  • Escalation and continuing offences: not specified on the cited page.
  • Non-monetary sanctions: orders to secure data, corrective action plans, and referral to legal proceedings or court action where applicable.
  • Enforcer: City of Winnipeg Access and Privacy office; complaints may be reviewed by the Manitoba Ombudsman for municipal matters.
  • Inspection and complaint pathways: report to the City Access and Privacy office and, if unresolved, consider filing a complaint with the Manitoba Ombudsman.
  • Appeal and review routes: administrative review through city procedures and external complaint to the Manitoba Ombudsman; specific time limits are not specified on the cited page.
  • Defences and discretion: exemptions, lawful disclosure rules, or authorized releases may apply; specific permitted defences are not specified on the cited page.

Applications & Forms

No dedicated municipal "data breach" form is universally published on the City’s general access and privacy pages; reporting is generally done by contacting the Access and Privacy office directly or by following the City’s access request and complaint procedures as published by the City of Winnipeg.

If unsure, call the City’s Access and Privacy contact to confirm required steps.

Action steps: how to report to the City

  • Call or email the City of Winnipeg Access and Privacy office and provide a clear summary of the incident.
  • Send written documentation by email or mail as instructed by the office to create an official record.
  • Follow any instructions on containment, evidence preservation, or notification the City requests.
  • If the City’s response is unsatisfactory, consider filing a complaint with the Manitoba Ombudsman for municipal privacy matters.

FAQ

How do I know if my information was exposed?
If the City confirms unauthorized access or you receive notice of a breach, that indicates exposure; otherwise document suspicious activity and ask the City to investigate.
Will the City notify affected residents?
Notification practices depend on the incident and applicable rules; ask the Access and Privacy office whether the City will notify affected individuals.
Can I sue the City for a data breach?
Legal remedies depend on facts and governing law; consult a lawyer. Administrative complaints may be submitted to the Manitoba Ombudsman for municipal matters.

How-To

  1. Contact the City of Winnipeg Access and Privacy office with incident details and request official confirmation.
  2. Collect and preserve evidence: copies of notices, screenshots, and names of city staff you spoke to.
  3. Follow City instructions for containment and any recommended notifications to reduce harm.
  4. If unresolved, submit a formal complaint to the Manitoba Ombudsman and provide all documentation.

Key Takeaways

  • Report suspected breaches promptly to the City’s Access and Privacy office.
  • Preserve evidence and keep records of all communications.
  • If the City does not resolve the issue, consider filing a complaint with the Manitoba Ombudsman.

Help and Support / Resources

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data