Health care industry is a prized target, experts say in wake of LifeLabs hack

Hackers accessed personal information of up to 15 million customers, almost all in Ontario and B.C.

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

Cyber security experts say that the recent data hack at LifeLabs Medical Laboratory Services, one of Canada’s largest medical services companies, is part of a broader problem faced by the health care industry.

LifeLabs revealed Tuesday that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., forcing the company to pay a ransom to retrieve and secure the data.

Raheel Quereshi, co-founder of Toronto-based consulting firm iSecurity, said Wednesday that the health care industry is a prized hacker target in recent years because victims often will pay a ransom to avoid an operational disruption.

iSecurity’s experience has been that the health care industry accounts for about the 48 per cent of the cases it has handled — although it wouldn’t reveal the identity of any of its 300 to 400 clients in Ontario.

“We completed, I think, more than 10 different cyber security responses this year, in health care. Some of them you’ve seen on the news and some of them didn’t make it to the news,” Quereshi said.

“So health care has been a big interest for the external threat agents and the hacker community.”

From the hacker’s point of view, he said, the health sector promises a good return on investment.

“The attackers are targeting health care sector more for financial gain than, really, trying to extract the information and sell it elsewhere. At the end of the day, they just want to get paid once they get in.”

Rob Martin, a vice-president for Waterloo, Ont.-based cyber security firm eSentire, agrees that criminals may move on to other victims after they’re paid — but that’s not necessarily the case.

“If someone is complacent, and doesn’t remediate or resolve the problem that caused things to happen in the first place, that threat will often times recur … and hold people hostage again.”

What’s more, Martin said, the criminals are “very opportunistic” and can find other ways to sell the information contained within the hacked database.

“On what’s referred to often as the dark web there are electronic sites … where you can buy identities and personal information quite inexpensively depending on the value of that data,” Martin said.

LifeLabs said Tuesday that the compromised database included health card numbers, names, email addresses, login, passwords and dates of birth but said it wasn’t sure how many of the files were accessed during the breach.

Privacy commissioners from B.C. and Ontario said they would examine the scope of the breach, the circumstances leading to it, and what measures LifeLabs could have taken to prevent and contain it.

LifeLabs chief executive Charles Brown, who has apologized publicly, assured the public that its consultants have seen no evidence that the data has been trafficked by criminal groups.

It’s offering customers one year of free protection that includes dark web monitoring and identity theft insurance. It will also contact about 85,000 customers in Ontario whose lab results were accessed.

The Canadian Press

Like us on Facebook and follow us on Twitter

Just Posted

The Arts Council of Ladysmith and District is working with several Vancouver Island art councils on the Digitial Innovation Group to improve digital skills for Island artists. (Submitted photo)
Digital Innovation Group supports digital literacy for Island artists

The goal is to leverage digital skills to promote Vancouver Island as an ‘arts powerhouse’

B.C. Centre for Disease Control data showing new cases by local health area for the week of May 2-8. (BCCDC image)
Vancouver Island COVID-19 local case counts the lowest they’ve been all year

On some areas of Island, more than 60 per cent of adults have received a vaccine dose

Emergency service vehicles respond to motor vehicle incident at Highway 1 and 1st Avenue in Ladysmith. (Submitted photo)
Truck hits person using mobility scooter at northern entrance of Ladysmith

One patient was transported to hospital in stable condition

Ladysmith RCMP safely escorted the black bear to the woods near Ladysmith Cemetary. (Town of Ladysmith/Facebook photo)
Bow-legged bear returns to Ladysmith, has an appointment with the vet

Conservation officers transported the bear to a wildlife veterinarian in Nanaimo for examination

A nurse gets a swab ready to perform a test on a patient at a drive-in COVID-19 clinic in Montreal, on Wednesday, October 21, 2020. THE CANADIAN PRESS/Paul Chiasson
Island’s daily COVID-19 case count drops below 10 for just the second time in 2021

Province reports 8 new COVID-19 cases on Vancouver Island Wednesday

Daily confirmed COVID-19 cases reported to B.C. public health, seven-day rolling average in white, to May 12, 2021. (B.C. Centre for Disease Control)
B.C. preparing ‘Restart 2.0’ from COVID-19 as June approaches

Daily infections fall below 500 Friday, down to 387 in hospital

Sinikka Gay Elliott was reported missing on Salt Spring Island on Wednesday, May 12. (Courtesty Salt Spring RCMP)
MISSING: Salt Spring RCMP find woman’s car, still seek Island resident

Sinikka Gay Elliott is 5’3” with a slim build and dark brown short hair

A Saanich man received almost 10 years in Supreme Court in Courtenay for a shooting incident from 2018. Record file photo
Shooting incident on Island nets almost 10-year sentence

Saanich man was arrested without incident north of Courtenay in 2018

Bradley Priestap in an undated photo provided to the media some time in 2012 by the London Police Service.
Serial sex-offender acquitted of duct tape possession in B.C. provincial court

Ontario sex offender on long-term supervision order was found with one of many ‘rape kit’ items

Rich Coleman, who was responsible for the gaming file off and on from 2001 to 2013, was recalled after his initial testimony to the Cullen Commission last month. (Screenshot)
Coleman questioned over $460K transaction at River Rock during B.C. casinos inquiry

The longtime former Langley MLA was asked about 2011 interview on BC Almanac program

Steven Shearer, <em>Untitled. </em>(Dennis Ha/Courtesy of Steven Shearer)
Vancouver photographer’s billboards taken down after complaints about being ‘disturbing’

‘Context is everything’ when it comes to understanding these images, says visual art professor Catherine Heard

Trina Hunt's remains were found in the Hope area on March 29. Her family is asking the public to think back to the weekend prior to when she went missing. (Photo courtesy of IHIT.)
Cousin of missing woman found in Hope says she won’t have closure until death is solved

Trina Hunt’s family urges Hope residents to check dashcam, photos to help find her killer

Chief Public Health Officer Theresa Tam listens to a question during a news conference, in Ottawa. THE CANADIAN PRESS/Adrian Wyld
Restrictions will lift once 75% of Canadians get 1 shot and 20% are fully immunized, feds say

Federal health officials are laying out their vision of what life could look like after most Canadians are vaccinated against COVID-19

Most Read