The major cyberattack at the Telecommunications Services of Trinidad and Tobago shot back into public scrutiny again this week, after current acting CEO Kent Western told a Joint Select Committee his predecessor, Lisa Agard, was responsible for providing Public Utilities Minister Marvin Gonzales with misleading information on the matter.
During a contribution to the Parliament on November 1, Minister Gonzales claimed there was no compromise of customers’ data during an attack by RansomXXX. This proved to be inaccurate and days later, both TSTT and Gonzales backtracked and revealed the truth. So, contrary to what the minister said, and what TSTT clearly initially sought to hide, the cyberattackers managed to extract confidential information for thousands of customers, among them high profiled citizens such as the Prime Minister and President, and leaked it to the Dark Web.
This was a situation Prime Minister Dr Keith Rowley labelled a national security concern.
However, that Ms Agard has since challenged the minister’s account of the information she provided him, while he has maintained what he told parliamentary colleagues was “the incontrovertible truth,” leaves citizens in a quandary we believe only the minister can address.
To be clear, during an apology on the issue in the House last Friday, Minister Gonzales denied deliberately misleading the House, saying, “Madam Speaker, the statement in question which I made to the Honourable House on 1 November, 2023, was at all times based on: 1) Information provided to me by the executive and/or the board of TSTT; 2) TSTT’s correspondence to its customers dated 29th October, 2023; and 3) TSTT’s statement on (the) cybersecurity issue, (dated) October 30, 2023.”
Now that Ms Agard, who could have fallen in either of the two categories listed by the minister, has denied she gave the inaccurate information to Minister Gonzales, the question remains who did it? This is now especially critical since the other members of the TSTT executive/board, who would have given the minister information, are now also implicated in this unfolding fiasco.
It is without doubt that TSTT’s handling of the matter was nothing short of unethical and unprofessional, especially to its customers, who were kept in the dark for almost an entire month before media reports of the attack forced a company response. That it attempted to cleverly shroud aspects of information in its initial statement, only alerted to the fact that the attack was far more grave than it initially let on.
This was what ultimately led to Minister Gonzales’ erroneous statement in the House and Ms Agard’s firing. It is also not lost on us that Ms Agard is now finally confirming she was not given a chance to make a defence of herself. So if Ms Agard was sent packing for such a grievous indiscretion, why are the other individuals involved still within the organisation?
More importantly, Minister Gonzales must clear the air on the matter, since it means he still has not given the public full disclosure on exactly what transpired. The public deserves nothing less.
Failing this, Agard, who has no legal recourse because the TSTT executives who appeared before the JSC have immunity against such action, should be allowed to appear before the same committee to set the record straight once and for all.