Health care industry is a prized target, experts say in wake of LifeLabs hack

Hackers accessed personal information of up to 15 million customers, almost all in Ontario and B.C.

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

Cyber security experts say that the recent data hack at LifeLabs Medical Laboratory Services, one of Canada’s largest medical services companies, is part of a broader problem faced by the health care industry.

LifeLabs revealed Tuesday that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., forcing the company to pay a ransom to retrieve and secure the data.

Raheel Quereshi, co-founder of Toronto-based consulting firm iSecurity, said Wednesday that the health care industry is a prized hacker target in recent years because victims often will pay a ransom to avoid an operational disruption.

iSecurity’s experience has been that the health care industry accounts for about the 48 per cent of the cases it has handled — although it wouldn’t reveal the identity of any of its 300 to 400 clients in Ontario.

“We completed, I think, more than 10 different cyber security responses this year, in health care. Some of them you’ve seen on the news and some of them didn’t make it to the news,” Quereshi said.

“So health care has been a big interest for the external threat agents and the hacker community.”

From the hacker’s point of view, he said, the health sector promises a good return on investment.

“The attackers are targeting health care sector more for financial gain than, really, trying to extract the information and sell it elsewhere. At the end of the day, they just want to get paid once they get in.”

Rob Martin, a vice-president for Waterloo, Ont.-based cyber security firm eSentire, agrees that criminals may move on to other victims after they’re paid — but that’s not necessarily the case.

“If someone is complacent, and doesn’t remediate or resolve the problem that caused things to happen in the first place, that threat will often times recur … and hold people hostage again.”

What’s more, Martin said, the criminals are “very opportunistic” and can find other ways to sell the information contained within the hacked database.

“On what’s referred to often as the dark web there are electronic sites … where you can buy identities and personal information quite inexpensively depending on the value of that data,” Martin said.

LifeLabs said Tuesday that the compromised database included health card numbers, names, email addresses, login, passwords and dates of birth but said it wasn’t sure how many of the files were accessed during the breach.

Privacy commissioners from B.C. and Ontario said they would examine the scope of the breach, the circumstances leading to it, and what measures LifeLabs could have taken to prevent and contain it.

LifeLabs chief executive Charles Brown, who has apologized publicly, assured the public that its consultants have seen no evidence that the data has been trafficked by criminal groups.

It’s offering customers one year of free protection that includes dark web monitoring and identity theft insurance. It will also contact about 85,000 customers in Ontario whose lab results were accessed.

The Canadian Press

Like us on Facebook and follow us on Twitter

Just Posted

Katie Hamilton is one of three Victoria residents receiving a $10,000 podcast production grant from Telus Storyhive. Her podcast, Her Love of Sport, will take listeners through stories from women in the sports industry. (Courtesy of Katie Hamilton)
Three podcasts coming to Victoria following Telus Storyhive grants

Victoria podcasts chosen out of 700 applications to receive $10,000

A screenshot from a Nuu-chah-nulth healing song and performance created in collaboration between Hjalmer Wenstob and Timmy Masso. (Screenshot from YouTube)
VIDEO: Tla-o-qui-aht First Nation brothers produce COVID-19 healing song

Hjalmer Wenstob and Timmy Masso share dance and inspiration.

Paramedic Matthew Schlatter of Victoria is living a fuller life today due to the double lung transplant he received in 2019. He encourages B.C. residents to register as an organ donor and let their families know their wishes. (Instagram/Matthew Schlatter)
Vancouver Island man living a full, active life after double-lung transplant

Matt Schlatter encourages people to register as an organ donor to help others live

‘For Sale’ signs quickly turned to ‘Sold’ signs as record-high demand for housing meets record-low inventory. (Cole Schisler photo)
Multiple offers and unconditional sales rampant as Island housing market booms

Historically low interest, pent-up demand and low supply has sent the market soaring

Stz’uminus Elder George Harris, Ladysmith Mayor Aaron Stone, and Stz’uminus Chief Roxanne Harris opened the ceremony. (Cole Schisler photo)
Red dresses to be hung from Ladysmith to Oyster Bay, showing solidarity against racism

Leaders from Stz’uminus First Nation and the Town of Ladysmith hung new dresses on Sat. April 17

Vancouver resident Beryl Pye was witness to a “concerning,” spontaneous dance party that spread throughout social groups at Kitsilano Beach on April 16. (Screen grab/Beryl Pye)
VIDEO: Dance party erupts at Vancouver’s Kitsilano Beach to the dismay of onlookers

‘It was a complete disregard for current COVID-19 public health orders,’ says Vancouver resident Beryl Pye

A syringe is loaded with COVID-19 vaccine at a vaccination clinic run by Vancouver Coastal Health, in Richmond, B.C., Saturday, April 10, 2021. THE CANADIAN PRESS/Jonathan Hayward
B.C. to open up COVID vaccine registration to all B.C. residents 18+ in April

Registration does not equate to being able to book an appointment

(Black Press file photo).
Multiple stabbings at Vancouver Island bush party

Three youths hospitalized after an assault in Comox

Selina Robinson is shown in Coquitlam, B.C., on Friday November 17, 2017. British Columbia’s finance minister says her professional training as a family therapist helped her develop the New Democrat government’s first budget during the COVID-19 pandemic, which she will table Tuesday. THE CANADIAN PRESS/Darryl Dyck
B.C. finance minister to table historic pandemic-challenged deficit budget

Budget aims to take care of people during pandemic while preparing for post-COVID-19 recovery, Robinson said

Each spring, the Okanagan Fest-of-Ale is held in Penticton. This year, as a result of the COVID-19 pandemic, the festival will not be held. However, beer is still available. How much do you know about this beverage? (pxfuel.com)
QUIZ: How much do you really know about beer?

Put your knowledge to the test with this short quiz

The B.C. Centre for Disease Control has listed Harbour Air and Air Canada flights to and from Nanaimo, from April 3, 4 and 12, on its list of flights with COVID-19. (News Bulletin file)
COVID-19 cases reported for Nanaimo flights, says disease control centre

Nanaimo flights for April 3, 4 and 12 listed on BCCDC’s list of flights with COVID-19

A Parksville Fire Department’s firefighter hoses down the facade of a Parksville Heritage Centre building after it caught fire on Friday afternoon (April 16). (Michael Briones photo)
Fire crews, roofers work to douse building fire in Parksville

Damage was minimal and workers escaped injury

Best of the City 2019 (Sergej Krivenko photo)
Voting opens for Victoria’s annual Best of the City

Annual awards mark 27th year in Greater Victoria

‘Nanaimo’ will be spelled out in five-foot-tall letters upon a slab of concrete overlooking Swy-a-Lana Lagoon at Maffeo Sutton Park. (Greg Sakaki/The News Bulletin)
Five-foot-tall letters spelling out ‘Nanaimo’ coming to Maffeo Sutton Park

$50,000-project expected to be installed by the end of April

Most Read