Health care industry is a prized target, experts say in wake of LifeLabs hack

Hackers accessed personal information of up to 15 million customers, almost all in Ontario and B.C.

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

Cyber security experts say that the recent data hack at LifeLabs Medical Laboratory Services, one of Canada’s largest medical services companies, is part of a broader problem faced by the health care industry.

LifeLabs revealed Tuesday that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., forcing the company to pay a ransom to retrieve and secure the data.

Raheel Quereshi, co-founder of Toronto-based consulting firm iSecurity, said Wednesday that the health care industry is a prized hacker target in recent years because victims often will pay a ransom to avoid an operational disruption.

iSecurity’s experience has been that the health care industry accounts for about the 48 per cent of the cases it has handled — although it wouldn’t reveal the identity of any of its 300 to 400 clients in Ontario.

“We completed, I think, more than 10 different cyber security responses this year, in health care. Some of them you’ve seen on the news and some of them didn’t make it to the news,” Quereshi said.

“So health care has been a big interest for the external threat agents and the hacker community.”

From the hacker’s point of view, he said, the health sector promises a good return on investment.

“The attackers are targeting health care sector more for financial gain than, really, trying to extract the information and sell it elsewhere. At the end of the day, they just want to get paid once they get in.”

Rob Martin, a vice-president for Waterloo, Ont.-based cyber security firm eSentire, agrees that criminals may move on to other victims after they’re paid — but that’s not necessarily the case.

“If someone is complacent, and doesn’t remediate or resolve the problem that caused things to happen in the first place, that threat will often times recur … and hold people hostage again.”

What’s more, Martin said, the criminals are “very opportunistic” and can find other ways to sell the information contained within the hacked database.

“On what’s referred to often as the dark web there are electronic sites … where you can buy identities and personal information quite inexpensively depending on the value of that data,” Martin said.

LifeLabs said Tuesday that the compromised database included health card numbers, names, email addresses, login, passwords and dates of birth but said it wasn’t sure how many of the files were accessed during the breach.

Privacy commissioners from B.C. and Ontario said they would examine the scope of the breach, the circumstances leading to it, and what measures LifeLabs could have taken to prevent and contain it.

LifeLabs chief executive Charles Brown, who has apologized publicly, assured the public that its consultants have seen no evidence that the data has been trafficked by criminal groups.

It’s offering customers one year of free protection that includes dark web monitoring and identity theft insurance. It will also contact about 85,000 customers in Ontario whose lab results were accessed.

The Canadian Press

Like us on Facebook and follow us on Twitter

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The Cowichan Valley Arts Council is offering courses in drawing May through August 2021. (Submitted)
A&E column: Art is everywhere in the Cowichan Valley

What’s going in the Cowichan Valley arts and entertainment community

The CVRD introduces new app to contact residents during emergencies, a tool that chairman Aaron Stone says will improve communications. (File photo)
CVRD launches new app to spread information during emergencies

Cowichan Alert is a free app that can be downloaded onto smartphones, computers

A B.C. Centre for Disease Control map showing new COVID-19 cases by local health area for the week of April 25-May 1. (BCCDC image)
Vancouver Island’s COVID-19 case counts continue to trend down

Fewer than 200 active cases on the Island, down from highs of 500-plus earlier this spring

The Malahat SkyWalk will open to visitors in July 2021. (Malahat SkyWalk photo)
Malahat SkyWalk will open to visitors this July

Highly anticipated attraction will take guests 250m above sea level

FILE PHOTO
Editorial: Time to roll up our sleeves and pitch in

They’re just not quite sure they want to get a vaccine — yet

Protesters attempt to stop clear-cutting of old-growth trees in Fairy Creek near Port Renfrew. (Will O’Connell photo)
VIDEO: Workers, activists clash at site of Vancouver Island logging operation

Forest license holders asking for independent investigation into incident

Starting Tuesday, May 11, B.C. adults born in 1981 and earlier will be able to register for a vaccine dose. (Haley Ritchie/Black Press Media)
BC adults 40+ eligible to book COVID-19 vaccinations next week

Starting Tuesday, people born in 1981 and earlier will be able to schedule their inoculation against the virus

Parks Canada and Tla-o-qui-aht Tribal Parks dig the washed up Princess M out from sand along the south shore of the Pacific Rim National Park Reserve. (Nora O’Malley photo)
Rescue attempt costs man his boat off Pacific Rim National Park Reserve

Coast Guard response questioned after volunteer responder’s speedboat capsizes in heavy swells

Al Kowalko shows off the province’s first electric school bus, running kids to three elementary and two secondary schools on the West Shore. (Zoe Ducklow/News Staff)
B.C.’s first electric school bus making the rounds in Victoria suburbs

No emissions, no fuel costs and less maintenance will offset the $750K upfront expense

Road sign on Highway 1 west of Hope warns drivers of COVID-19 essential travel road checks on the highways into the B.C. Interior. (Jessica Peters/Chilliwack Progress)
B.C. residents want travel checks at Alberta border, MLA says

Police road checks in place at highways out of Vancouver area

Victoria police say the photo they circulated of an alleged cat thief was actually a woman taking her own cat to the vet. (Black Press Media File Photo)
Photo of suspected cat thief released by Victoria police actually just woman with her pet

Police learned the she didn’t steal Penelope the cat, and was actually taking her cat to the vet

The Canadian Coast Guard icebreaker Louis S. St-Laurent sails past a iceberg in Lancaster Sound, Friday, July 11, 2008. The federal government is expected to end nearly two years of mystery today and reveal its plan to build a new, long overdue heavy icebreaker for the Canadian Coast Guard. THE CANADIAN PRESS/Jonathan Hayward
Vancouver, Quebec shipyards to each get new heavy icebreaker, cost remains a mystery

Vancouver’s Seaspan Shipyards and Quebec-based Chantier Davie will each build an icebreaker for the coast guard

Findings indicate a culture of racism, misogyny and bullying has gripped the game with 64 per cent of people involved saying players bully others outside of the rink. (Pixabay)
Misogyny, racism and bullying prevalent across Canadian youth hockey, survey finds

56% of youth hockey players and coaches say disrespect to women is a problem in Canada’s sport

Most Read