EOHU hacked

The Glengarry News - - News -

The East­ern On­tario Health Unit has been a vic­tim of a cy­ber at­tack by hack­ers who have gained ac­cess to “sen­si­tive” med­i­cal in­for­ma­tion.

Septem­ber 29, the EOHU be­came aware that hack­ers “ac­cessed mul­ti­ple web­sites main­tained by the EOHU look­ing for credit card in­for­ma­tion which we do not col­lect,” the agency says.

“We im­me­di­ately shut down our sites, changed the pass­words, launched an in­ter­nal in­ves­ti­ga­tion, and ad­vised the In­for­ma­tion and Pri­vacy Com­mis­sioner of On­tario. The hack­ers also sent an email us­ing an EOHU ac­count about a con­test to win an iPhone. The hack­ers did not use our news­let­ter sub­scribers list, but rather up­loaded and used their own dis­tri­bu­tion list. We were able to iden­tify the re­cip­i­ents of the con­test email and alerted them that it was not le­git­i­mate and that click­ing on it may have in­fected their com­put­ers with mal­ware.”

Oc­to­ber 12, “Our in­ves­ti­ga­tion dis­cov­ered that the hack­ers were able to ac­cess cer­tain data­bases used to sched­ule ap­point­ments and log calls to the health unit. In most cases, the in­for­ma­tion to which the hack­ers had ac­cess was lim­ited to the caller’s name (first name and some­times last name), ap­point­ment date, and pur­pose. In some cases, a tele­phone num­ber but no other con­tact in­for­ma­tion was in the data­bases. Al­though these data­bases do not con­tain client med­i­cal records, some may con­tain notes. Where notes are sen­si­tive in na­ture, and to the ex­tent that we have con­tact in­for­ma­tion, we will reach out by tele­phone to af­fected in­di­vid­u­als.”

The agency says it is “re­build­ing, re­con­fig­ur­ing and in­cor­po­rat­ing new se­cu­rity mea­sures into our web­sites to make them more se­cure against cy­ber at­tacks. We will also be con­sult­ing with web se­cu­rity spe­cial­ists about any ad­di­tional steps we can rea­son­ably take to for­tify our elec­tronic in­for­ma­tion as­sets against at­tacks.”

Any­one with ques­tions is asked to con­tact the unit’s pri­vacy of­fi­cer at 613-933-1375 or 1-800-2677120, ext. 218.

If you be­lieve that your pri­vacy rights have not been han­dled prop­erly, you can also con­tact the In­for­ma­tion and Pri­vacy Com­mis­sioner of On­tario, 2 Bloor St. East, Suite 1400, Toronto, On­tario M4W 1A8, tele­phone 1800-387-0073.

Newspapers in English

Newspapers from Canada

© PressReader. All rights reserved.