Health care industry is a prized target, experts say in wake of LifeLabs hack

Hackers accessed personal information of up to 15 million customers, almost all in Ontario and B.C.

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

LifeLabs signage is seen outside of one of the lab’s Toronto locations, Tuesday, Dec. 17, 2019. THE CANADIAN PRESS/Cole Burston

Cyber security experts say that the recent data hack at LifeLabs Medical Laboratory Services, one of Canada’s largest medical services companies, is part of a broader problem faced by the health care industry.

LifeLabs revealed Tuesday that hackers gained access to the personal information of up to 15 million customers, almost all in Ontario and B.C., forcing the company to pay a ransom to retrieve and secure the data.

Raheel Quereshi, co-founder of Toronto-based consulting firm iSecurity, said Wednesday that the health care industry is a prized hacker target in recent years because victims often will pay a ransom to avoid an operational disruption.

iSecurity’s experience has been that the health care industry accounts for about the 48 per cent of the cases it has handled — although it wouldn’t reveal the identity of any of its 300 to 400 clients in Ontario.

“We completed, I think, more than 10 different cyber security responses this year, in health care. Some of them you’ve seen on the news and some of them didn’t make it to the news,” Quereshi said.

“So health care has been a big interest for the external threat agents and the hacker community.”

From the hacker’s point of view, he said, the health sector promises a good return on investment.

“The attackers are targeting health care sector more for financial gain than, really, trying to extract the information and sell it elsewhere. At the end of the day, they just want to get paid once they get in.”

Rob Martin, a vice-president for Waterloo, Ont.-based cyber security firm eSentire, agrees that criminals may move on to other victims after they’re paid — but that’s not necessarily the case.

“If someone is complacent, and doesn’t remediate or resolve the problem that caused things to happen in the first place, that threat will often times recur … and hold people hostage again.”

What’s more, Martin said, the criminals are “very opportunistic” and can find other ways to sell the information contained within the hacked database.

“On what’s referred to often as the dark web there are electronic sites … where you can buy identities and personal information quite inexpensively depending on the value of that data,” Martin said.

LifeLabs said Tuesday that the compromised database included health card numbers, names, email addresses, login, passwords and dates of birth but said it wasn’t sure how many of the files were accessed during the breach.

Privacy commissioners from B.C. and Ontario said they would examine the scope of the breach, the circumstances leading to it, and what measures LifeLabs could have taken to prevent and contain it.

LifeLabs chief executive Charles Brown, who has apologized publicly, assured the public that its consultants have seen no evidence that the data has been trafficked by criminal groups.

It’s offering customers one year of free protection that includes dark web monitoring and identity theft insurance. It will also contact about 85,000 customers in Ontario whose lab results were accessed.

The Canadian Press

Like us on Facebook and follow us on Twitter

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Students from Cedar Hill Middle School play and hold a sign to protest proposed music cuts to school band programs in the Greater Victoria School District, during a Monday event. The district is facing a massive deficit and is considering a number of options for cutting costs. (Photo courtesy Laura Alcaraz-Sehn)
Massive student demonstration planned to protest Greater Victoria school band cuts

Band students from 14 SD61 schools will be at major intersections Thursday after school

Island Health has reported a COVID-19 exposure at Pacific Christian Elementary School on April 12. (Google Streetview/Screenshot)
COVID-19 exposure reported at Saanich elementary school

Pacific Christian Elementary School experienced exposure on April 12

Reuben Forsland in his East Sooke studio with the guitar he crafted from hemp wood that he hopes will start a conversation about sustainability. (Rick Stiebel - Sooke News Mirror)
East Sooke artisan strikes a chord with custom guitars

Guitars include wood from Hendrix childhood home in Seattle

Island Health declared a COVID-19 outbreak in two houses at the Mount St. Mary long-term care home on Wednesday. (Photo courtesy of Google Earth)
Island Health declares outbreak at Victoria long-term care home

Resident, staff member test positive for COVID-19 at Mount St. Mary facility

A man accused of choking a 15-year-old in his tent in Beacon Hill Park Tuesday night has been arrested by Victoria police. (Black Press Media file photo)
Man accused of choking, sexually exploiting 15-year-old in Victoria tent arrested

Police arrested the 38-year-old in Beacon Hill Park Wednesday afternoon

Canadian Prime Minister Justin Trudeau and United States President Joe Biden smile as they say farewell following a virtual joint statement in Ottawa, Tuesday, February 23, 2021. THE CANADIAN PRESS/Adrian Wyld
Trudeau pledges to cut emissions by 40% to 45% by 2030, short of U.S. goal

Trudeau announced target during a virtual climate summit convened by U.S. President Joe Biden

(Black Press Media file photo)
POLL: Have rising prices caused you to give up hope of buying a home?

Do you have a spare 50 grand or so kicking around (have… Continue reading

Anyone with information on any of these individuals is asked to call 1-800-222-TIPS (8477) or visit the website victoriacrimestoppers.ca for more information.
Greater Victoria Crime Stoppers wanted list for the week of April 20

Greater Victoria Crime Stoppers is seeking the public’s help in locating the… Continue reading

Letisha Reimer, 13, was killed Nov. 1, 2016 in a stabbing at Abbotsford Senior Secondary.
Second-degree murder conviction stands for Abbotsford school killer

Judge finds that Gabriel Klein is criminally responsible for death of Letisha Reimer

FILE – RCMP officers wearing face masks to curb the spread of COVID-19 stand by as protesters opposed to the Trans Mountain pipeline expansion block rail lines, in Burnaby, B.C., on Friday, November 27, 2020. THE CANADIAN PRESS/Darryl Dyck
‘Very scary’: B.C. travel rules too vague, shouldn’t involve police, civil liberties group says

BCCLA said that speaking with communities could have avoided top-down approach

Ocean Legacy Foundation members conduct a shoreline pollution cleanup in Vancouver. (OLP)
It’s time to end ‘suffocating’ plastic pollution along B.C. shorelines, advocates urge

This Earth Day, Ocean Legacy Foundation is launching a free educational platform to educate the public about plastic pollution

A teacher-librarian in Nanaimo was fired in 2019 for checking out an age-inappropriate graphic novel to a student. The discipline agreement was published Wednesday, April 21. (News Bulletin file photo)
B.C. teacher-librarian fired for checking out too-graphic graphic novel to student

Teacher had been previously disciplined and suspended on two occasions

Aria Pendak Jefferson cuddles ChiChi, the family cat that ran away two years ago in Ucluelet. The feline was missing until Courtney Johnson and Barry Edge discovered her in the parking lot of the Canadian Princess earlier this month. Aria and her parents were reunited with ChiChi in a parking lot in Port Alberni. (SUSAN QUINN/ Alberni Valley News)
An Island girl’s wish is answered as her cat came back

Courtenay family reunited with cat that went missing in Ucluelet in 2019

The Coastal Fire Centre is looking ahead to the wildfire season on Vancouver Island. (Phil McLachlan – Western News)
Coastal Fire Centre looking ahead at wildfire season on Vancouver Island

‘We’re asking people in the spring to be very careful’

Most Read