Health care industry is a prized target, experts say in wake of LifeLabs hack

Hackers accessed personal information of up to 15 million customers, almost all in Ontario and B.C.

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

Cyber security experts say that the recent data hack at LifeLabs Medical Laboratory Services, one of Canada’s largest medical services companies, is part of a broader problem faced by the health care industry.

LifeLabs revealed Tuesday that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., forcing the company to pay a ransom to retrieve and secure the data.

Raheel Quereshi, co-founder of Toronto-based consulting firm iSecurity, said Wednesday that the health care industry is a prized hacker target in recent years because victims often will pay a ransom to avoid an operational disruption.

iSecurity’s experience has been that the health care industry accounts for about the 48 per cent of the cases it has handled — although it wouldn’t reveal the identity of any of its 300 to 400 clients in Ontario.

“We completed, I think, more than 10 different cyber security responses this year, in health care. Some of them you’ve seen on the news and some of them didn’t make it to the news,” Quereshi said.

“So health care has been a big interest for the external threat agents and the hacker community.”

From the hacker’s point of view, he said, the health sector promises a good return on investment.

“The attackers are targeting health care sector more for financial gain than, really, trying to extract the information and sell it elsewhere. At the end of the day, they just want to get paid once they get in.”

Rob Martin, a vice-president for Waterloo, Ont.-based cyber security firm eSentire, agrees that criminals may move on to other victims after they’re paid — but that’s not necessarily the case.

“If someone is complacent, and doesn’t remediate or resolve the problem that caused things to happen in the first place, that threat will often times recur … and hold people hostage again.”

What’s more, Martin said, the criminals are “very opportunistic” and can find other ways to sell the information contained within the hacked database.

“On what’s referred to often as the dark web there are electronic sites … where you can buy identities and personal information quite inexpensively depending on the value of that data,” Martin said.

LifeLabs said Tuesday that the compromised database included health card numbers, names, email addresses, login, passwords and dates of birth but said it wasn’t sure how many of the files were accessed during the breach.

Privacy commissioners from B.C. and Ontario said they would examine the scope of the breach, the circumstances leading to it, and what measures LifeLabs could have taken to prevent and contain it.

LifeLabs chief executive Charles Brown, who has apologized publicly, assured the public that its consultants have seen no evidence that the data has been trafficked by criminal groups.

It’s offering customers one year of free protection that includes dark web monitoring and identity theft insurance. It will also contact about 85,000 customers in Ontario whose lab results were accessed.

The Canadian Press

Like us on Facebook and follow us on Twitter

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Victoria’s Royal Jubilee Hospital took in two COVID-19 patients from Northern Health as part of a provincial agreement. (Black Press Media file photo)
Victoria hospital takes in two COVID-19 patients from Northern Health

Royal Jubilee Hospital takes patients as part of provincial transport network

An aerial shot of Cedar Valley Lodge this past August, LNG Canada’s newest accommodation for workers. This is where several employees are isolating after a COVID-19 outbreak was declared on Nov. 19. (Photo courtesy of LNG Canada)
52 positive COVID-19 cases now associated with LNG Canada site outbreak

Eight cases still active, 44 considered recovered

pinnacle pellet
Three injured at pellet plant fire

Pinnacle Pellet temporarily suspends operations

Elf on the Shelf 2020 in Burns Lake. (Priyanka Ketkar photo/Lakes District News)
Did you spot the Elf yet?

The festive fun started in Burns Lake last Friday, with little elves… Continue reading

Gas price in PG is at $1.05, much lower than Burns Lake’s $1.13. (Priyanka Ketkar photo/Lakes District News)
What’s going on with gas prices in the north?

A look at gas prices from Prince George to Houston

Provincial health officer Dr. Bonnie Henry updates B.C.’s coronavirus situation at the legislature, Nov. 30, 2020. (B.C. government)
Hockey team brought COVID-19 back from Alberta, B.C. doctor says

Dr. Bonnie Henry pleads for out-of-province travel to stop

B.C. Premier John Horgan on a conference call with religious leaders from his B.C. legislature office, Nov. 18, 2020, informing them in-person church services are off until further notice. (B.C. government)
B.C. tourism relief coming soon, Premier John Horgan says

Industry leaders to report on their urgent needs next week

An RCMP cruiser looks on as a military search and rescue helicopter winds down near Bridesville, B.C. Tuesday, Dec. 1. Photo courtesy of RCMP Cpl. Jesse O’Donaghey
B.C. Mountie, suspect airlifted by Canadian Armed Forces from ravine after foot chase

Military aircraft were dispatched from Comox, B.C., say RCMP

An 18-year old male southern resident killer whale, J34, is stranded near Sechelt in 2016. A postmortem examination suggests he died from trauma consistent with a vessel strike. (Photo supplied by Paul Cottrell, Fisheries and Oceans Canada)
“We can do better” — humans the leading cause of orca deaths: study

B.C. research reveals multitude of human and environmental threats affecting killer whales

A logo for Netflix on a remote control is seen in Portland, Ore.,Aug. 13, 2020. Experts in taxation and media say a plan announced Monday by the government will ultimately add to the cost of digital services and goods sold by foreign companies. THE CANADIAN PRESS/AP-Jenny Kane
‘Netflix tax’ for digital media likely to raise prices for consumers, experts say

The government says Canadian companies already collect those taxes when they make digital sales

BIG SALMON ranch in Washington State. (Center for Whale Research handout)
Non-profit buys Chinook ranch in hopes of increasing feed for southern resident killer whales

The ranch, which borders both sides of Washington State’s Elwha River, is a hotspot for chinook salmon

Gaming content was big on YouTube in 2020. (Black Press Media files)
What did Canadians watch on Youtube during isolation? Workouts, bird feeders

Whether it was getting fit or ‘speaking moistly,’ Canadians had time to spare this year

Most Read