Connect with us

Business

Ontario Cannabis Store data breach raises credibility, security concerns

Published

on

The credibility of the government-run Ontario Cannabis Store is at stake after sensitive industry data was misappropriated and leaked, according to experts.

The Ontario Provincial Police (OPP) confirmed it opened an investigation earlier this month into what the OCS alleges is the theft of the business data.

The data includes individual cannabis retailers’ sales, their inventory levels and other sensitive information such as store license number and the amount of kilograms and packaged units sold for at least the months of December 2021 and January 2022.

As the only legal wholesaler of cannabis in Ontario – Canada’s biggest legal cannabis market by sales – industry sources said it’s imperative the government-run body be seen as credible in the eyes of its clients, the more than 1,500 cannabis stores that can buy their products only from the OCS.

David Hyde, CEO of security consultancy Hyde Advisory & Investments in Toronto, said the wholesaler needs to address the issue head-on and identify what led to the breach.

“To maintain their reputation and credibility, I’d think the OCS wants to identify and address any root cause issues of this firstly and then send out other communications to appropriate parties, stores included, to reassure them that those have been addressed,” Hyde told MJBizDaily.

Other business sources expressed concern the data could be used to exploit vulnerable store owners whose businesses aren’t performing well – for example, they could be vulnerable to predatory takeover bids.

They also wonder if the OCS could benefit from a permanent CEO after years of filling the position on an interim basis.

Responding to queries from MJBizDaily, OCS Senior Director of Communications Daffyd Roderick said immediate steps were taken to address the situation once the organization became aware of the data breach.

“We restricted access to our internal data reports, commenced a comprehensive investigation to identify the source of this problem and notified the Ontario Provincial Police,” he said.

“The OPP is conducting its own review and investigation into the misuse of this data within the cannabis industry.”

Who has the data?

The Canadian Federation of Independent Business (CFIB) is among those concerned the stolen data could be used for exploitative business practices.

“With all the stories about the (cannabis retail) market probably going to consolidate, there’s a bit of oversaturation, you’ve got to wonder exactly who has the information,” said Ryan Mallough, the CFIB’s senior director of provincial affairs for Ontario.

“Are there bully offers out there? If you’ve got that (leaked data) and you’re looking to consolidate stores in an area, you know who to pick on, who to flex and go at.”

Mallough also expressed concern over other possible fallout.

“I heard from one business owner who was now wondering if they’re doing really well, will someone use that data and open a store across the street?” he said.

“Another asked, ‘Does my competitor two blocks away have that information, and how are they using it? Maybe not against me but still to their advantage?’”

Mallough said the general feeling among store owners he spoke with was “shock, frustration, a little bit of exasperation, like a ‘What did you expect from the OCS kind of thing.’ Yet another frustration point.”

Leadership issues?

Shane Morris, founder of Ottawa-based Morris and Associates Consulting, said the OCS plays a pivotal role as the Ontario cannabis retail industry’s only wholesaler.

“It’s the only cannabis bridge in the industry (in terms of wholesale in Ontario), and if that bridge goes down, then it damages the value chain very quickly and very substantially.”

“I think it’s a function of a young organization, they’re handling billions of dollars, (and) it clearly has leadership issues. They’re on their sixth CEO – they have a lot of learning to do,” he said.

Last March, David Lobo became the OCS’ sixth president in three years – but only on an interim basis.

Lobo, who hasn’t done any media interviews, was the organization’s third straight temporary chief executive since September 2019.

The OCS said it initiated a search for a new CEO “in early 2022.”

“Once the successful candidate is selected, OCS will issue an official announcement,” the OCS’ Roderick said.

“There is definitely a credibility issue, because you’ve got a lot of people’s livelihoods in the value chain that rely on this organization (Ontario Cannabis Store), whether it’s licensed producers or retailers,” Morris said.

“Fundamentally, I think the OCS has a problem with handling confidential business information.”

The leak of information raises concerns about the OCS’ data governance model, said Ann Cavoukian, Ontario’s former privacy commissioner and the current executive director of the Global Privacy and Security by Design Centre, which advises businesses on privacy protections.

Cavoukian said the government-run corporation “reneged in terms of their requirements to protect the data – the data need to be strongly secured, and that’s their obligation.”

“I would urge them to add security and get security into the design of their operations, so that the data can be secured and protected.”

late 2021 report from the Office of the Auditor General of Ontario found that the OCS lacked “a data-governance component, including identification of what data the enterprise has, where that data resides, how that data is used and what compliance obligations apply.”

In response, the OCS said it was working on a data strategy that would “include appropriate safeguarding and retention standards for third-party data.”

‘Needs to be reassurance’

One independent Ontario cannabis retailer told MJBizDaily the data breach represented “an egregious breach of trust” between the wholesaler and the retailers that depend on it.

To regain that trust, experts in business security suggest the OCS needs to get to the bottom of what actually happened and come clean with the hundreds of stores that rely on its services.

“At the end of the day, this is something that needs to be answered to,” said Hyde, the security consultant.

“There needs to be reassurance that whatever it was that led to this has been addressed and identified. Right now, we know what it’s not – an IT security breach.”

The OCS has said the data was stolen and not the result of a hack.

Hyde said the security industry leans on a standard called “the principle of least privilege.”

It means only those who absolutely must have access credentials to certain security or data should be allowed to have them, and the credentials need to be very tightly monitored.

“That’s to make sure that if you have the keys to the crown jewels, so to speak, those passwords are changed every couple of months, there’s oversight,” Hyde said.

“The likelihood is that this is more of a procedural failure, or an access-privilege type of issue that befell the OCS, rather than it being a weak security system that was overtaken by hackers.”

Matt Lamers can be reached at matt.lamers@mjbizdaily.com.

Solomon Israel can be reached at solomon.israel@mjbizdaily.com.

Source: https://mjbizdaily.com/ontario-cannabis-store-data-breach-raises-security-credibility-concerns/

Business

Alleged Crores Pharma Scam Mastermind Arrested from Surat

Published

on

By

After evading law enforcement for nearly 13 years, an accused linked to a large-scale pharmaceutical fraud case has been arrested by Delhi Police from Surat, Gujarat. The suspect is alleged to have orchestrated a series of financial scams involving fake identities, forged documents, and dishonoured cheques used to procure high-value pharmaceutical raw materials.

Authorities say the accused, identified as Himmat Singh Lodha, is believed to have defrauded multiple pharmaceutical companies in Delhi of goods worth approximately ₹98 lakh before disappearing and remaining underground for years.

Fake Business Deals and Dishonoured Cheques Used in Fraud

Investigators claim the accused posed as a legitimate pharmaceutical trader and placed bulk orders for expensive drug ingredients, offering post-dated cheques as payment security.

In one documented case from 2013, he allegedly obtained around 550 kilograms of Gliclazide, a diabetes-related pharmaceutical ingredient, valued at over ₹26 lakh. When suppliers attempted to encash the cheques, they were reportedly returned with the remark “account closed.”

Following the transaction, the accused allegedly vacated his office and rented residence and disappeared without settling payments. He was later declared a proclaimed offender in 2016 after repeatedly failing to appear before court proceedings. Authorities had also issued a reward for information leading to his arrest.

Multiple Identities and Repeated Fraud Pattern

Police investigations further link the accused to another cheating case dating back to 2012, where he allegedly used a fake identity, “Kailash Jain,” to obtain a large consignment of Ambroxol HCL, a pharmaceutical compound used in cough medications. The value of that consignment was estimated at around ₹72 lakh.

Officials believe the accused followed a consistent modus operandi—posing as a credible businessman, securing high-value goods on deferred payment terms, and then disappearing after delivery while shutting down business operations.

Investigators suspect that forged business records, fake company credentials, and fabricated financial histories were used to build trust with suppliers and gain access to expensive raw materials.

Multi-State Surveillance Leads to Arrest in Surat

A special Crime Branch team tracked the accused through coordinated surveillance efforts across multiple cities, including Mumbai, Ahmedabad, and Surat. After nearly a month of technical monitoring and intelligence gathering, officials located and arrested him from a residential area in Surat.

Authorities also revealed that the accused had been involved in property-related activities while staying under the radar to avoid detection.

Growing Threat of Corporate Identity Fraud

The case highlights a rising trend of organised financial fraud targeting industries that rely heavily on trust-based transactions and deferred payments. Experts note that criminals increasingly exploit gaps in corporate verification systems by using fake GST registrations, temporary offices, and forged documentation to appear legitimate.

Cybercrime and financial fraud specialists warn that such schemes are becoming more complex with the widespread availability of digital business tools, making it easier to create convincing but fraudulent corporate identities.

Experts Urge Stronger Due Diligence in High-Value Transactions

Experts, including former IPS officer and cybercrime specialist Prof. Triveni Singh, emphasize the need for stricter verification procedures in commercial dealings. He noted that relying solely on paperwork or digital business profiles can expose companies to significant financial risk.

Authorities and industry experts recommend physical verification of business operations, bank account validation, and detailed background checks before engaging in high-value or deferred-payment transactions—particularly in sectors like pharmaceuticals, where single consignments can involve transactions worth crores.

Continue Reading

Business

EU Pressure Builds on Google as Regulators Face Calls for Massive Fine Over Search Practices

Published

on

By

A growing coalition of European industry groups is intensifying pressure on regulators to take decisive action against Google over allegations of unfair search practices that could reshape competition rules across the region’s digital economy.

Investigation Under Digital Markets Act Gains Momentum

The case is being examined by the European Commission under the European Union’s landmark Digital Markets Act (DMA), introduced to curb the dominance of major technology platforms and ensure fair competition.

Launched in March 2024, the investigation focuses on whether Google has been prioritising its own services in search results, potentially disadvantaging rival businesses that rely on online visibility to reach customers.

Industry Groups Demand Swift Action

Several prominent European organizations have jointly urged regulators to conclude the probe without further delay. They argue that prolonged investigations allow alleged anti-competitive practices to continue, putting European companies—especially startups—at a disadvantage.

Signatories include the European Publishers Council, the European Magazine Media Association, the European Tech Alliance, and EU Travel Tech.

In a joint statement, these groups warned that delays in enforcement are affecting innovation, profitability, and growth prospects for regional businesses competing in digital markets.

Google Denies Allegations

Google has rejected claims of bias, stating that its search algorithms are designed to deliver the most relevant and useful results to users. The company has also proposed adjustments to address regulatory concerns.

However, critics argue that these changes are insufficient and fail to address the core issue of market dominance.

Potential Billion-Euro Penalties

If found in violation of the DMA, Google could face significant financial penalties. Under EU rules, fines can reach a substantial percentage of a company’s global turnover, potentially amounting to billions of euros.

Regulators may also impose corrective measures requiring changes to business practices, which could have long-term implications for how digital platforms operate in Europe.

Wider Implications for Big Tech

The case highlights ongoing tensions between European regulators and major U.S. technology firms. In recent years, the EU has taken a more aggressive stance in enforcing competition laws, aiming to create a level playing field for local businesses.

A final ruling against Google could set a major precedent, influencing future enforcement actions and shaping the regulatory landscape for global tech companies operating within Europe.

As scrutiny intensifies, the outcome of the investigation is expected to play a critical role in defining the future of digital competition across the European Union.

Continue Reading

AI & Technology

Amazon Faces Potential Criminal Trial in Italy Over €1.2 Billion Tax Evasion Allegations

Published

on

By

Milan: U.S. tech giant Amazon is facing the prospect of a major legal showdown in Italy, after prosecutors in Milan formally requested a court to move forward with criminal proceedings over alleged tax evasion totaling approximately ₹12,500 crore (€1.2 billion).

The case targets Amazon’s European division along with four senior executives, marking one of the most significant tax-related investigations involving a global e-commerce platform in Europe.

Trial Push Despite Multi-Million Euro Settlement

The move comes even after Amazon reached a financial settlement with Italian tax authorities in December, agreeing to pay around ₹5,500 crore (€527 million), including interest, to resolve part of the dispute.

Typically, such settlements lead to the closure of criminal investigations. However, Milan prosecutors have opted to proceed, signaling a tougher stance on alleged corporate tax violations.

A preliminary hearing is expected in the coming months, where a judge will decide whether to formally indict the company and its executives or dismiss the case.

Allegations of VAT Evasion Through Marketplace Sellers

At the center of the investigation are claims that Amazon’s platform enabled non-European Union sellers to avoid paying value-added tax (VAT) on goods sold to Italian consumers between 2019 and 2021.

Prosecutors allege that the company’s marketplace structure allowed thousands of foreign vendors—many reportedly based in China—to operate without fully disclosing their identities or tax obligations. This, authorities argue, led to substantial VAT losses for the Italian government.

Under Italian law, online platforms facilitating sales can be held partially liable if third-party sellers fail to comply with tax requirements, a key point in the prosecution’s case.

Italian Government Named as Affected Party

In their filing, prosecutors identified Italy’s Economy Ministry as the injured party, citing significant financial damage resulting from the alleged tax evasion.

Legal experts say the outcome of the case could have wide-ranging implications across the European Union, where VAT systems are harmonized and similar compliance rules apply to digital marketplaces.

Multiple Investigations Add to Pressure

The VAT probe is just one of several legal challenges facing Amazon in Italy. The European Public Prosecutor’s Office is reportedly examining additional tax-related issues covering more recent years.

Meanwhile, Milan authorities are pursuing separate investigations into alleged customs fraud linked to imports from China and whether Amazon maintained an undeclared “permanent establishment” in Italy—potentially exposing it to higher tax liabilities.

In a separate regulatory action, Italy’s data protection authority recently ordered an Amazon unit to stop using personal data from over 1,800 employees at a warehouse near Rome.

Amazon Denies Allegations

Amazon has consistently denied wrongdoing and indicated it will strongly contest the allegations in court if the case proceeds. The company has also warned that prolonged legal uncertainty could impact investor confidence and Italy’s appeal as a destination for international business.

Broader Impact on Europe’s Digital Economy

If the case moves to trial, it could become a landmark moment for the regulation of global e-commerce platforms in Europe. Governments across the region are increasingly scrutinizing how digital marketplaces handle tax compliance, especially in cross-border transactions.

With online retail continuing to expand, regulators are under mounting pressure to ensure that multinational platforms and third-party sellers adhere to the same tax rules as traditional businesses.

Continue Reading

Trending

Copyright © 2022 420 Reports Marijuana News & Information Website | Reefer News | Cannabis News