Public Notice

Public Notice – Privacy Incident at Céragrès

This notice is directed solely at former employees of Céragrès whose contact information is not on file. Current employees have already been notified directly. This notice is not directed at customers, suppliers, or other business partners of the company, since Céragrès's risk assessment concluded that current and former employees are the individuals facing a serious risk of harm as a result of this incident

Notice of Privacy Incident

Céragrès ("Céragrès") is informing its former employees of a privacy incident that may have affected their personal information. While there is currently no indication of identity theft, some of your information may have been present in the affected systems. We want to inform those affected of what happened, the measures taken to remedy the situation, and the identity monitoring services made available to them.

Details of the Incident

Céragrès recently experienced an incident affecting the confidentiality of personal information (the "Incident"). On June 26, 2026, we were informed of a security incident. We immediately secured our network, which rendered certain systems temporarily inaccessible, and launched an investigation with external cybersecurity and digital forensics experts. We are also working with specialists to manage the required filings with the relevant authorities in Quebec.

As soon as our systems became accessible again, we undertook, with the help of our external experts, to assess whether data had been exfiltrated and, if so, to determine its nature. The investigation revealed that an unauthorized third party may have accessed our network as early as April 10, 2026, and confirmed that an unauthorized data transfer occurred during the night of June 25 to 26, 2026. It was not until August 1, 2026, when certain data was identified on the dark web, that we were able to confirm the exact nature of the personal information affected, although this information is no longer displayed there. Following this confirmation, and further to our risk-of-harm assessment, we acted diligently to notify those affected, namely our current and former employees.

Receipt of this notice means that the personal information of former employees affected may be part of the exfiltrated files. To date, we have found no evidence of fraudulent use of the personal information related to this incident.

Information Involved

While it is difficult to confirm with certainty which data was accessed or acquired, the following information may have been compromised: full name, home address, date of birth, cell phone number, personal email address, driver's licence number, social insurance number, health insurance number, passport number, salary, position or occupation, tax information, residency or citizenship status, health and social services information, school or academic records, banking information (including account number), credit card number and security code, as well as other personal information contained in an employee or former employee file at Céragrès. Not all of these categories necessarily apply to every individual.

Measures Taken

As noted above, we secured our systems and launched an immediate investigation. To prevent a recurrence of such events, we are closely monitoring our systems and have implemented enhanced security measures. We are continually evaluating ways to improve the security of our network.

As a precaution, we have retained the services of Equifax to offer free identity monitoring to those affected.

What You Can Do

If you are a former employee of Céragrès and believe you may have been affected by this incident, we invite you to contact us without delay at: vieprivee@ceragres.ca. We will confirm whether your personal information was affected by this incident and, if so, offer you access to Equifax's free identity monitoring services.

In addition, we recommend remaining vigilant against identity theft and fraud by regularly reviewing your bank statements. While no evidence indicates fraudulent use of your information, we encourage you to take advantage of this service if your involvement is confirmed.

Contact Us

We understand that you may have additional questions. For any questions, please contact vieprivee@ceragres.ca.

Céragrès