Cyberattack on B.C. health websites may have taken workers’ personal information

“I sincerely regret this event happened, and want to reassure everyone that we are working with cybersecurity and privacy experts to address the incident, safeguard against future attacks and notify and support individuals whose personal information may have been involved,” he said at a news conference.

McMillian said the association will reach out to everyone whose information may have been compromised over the next few days to offer them two years of monitoring by the credit agency Equifax.

Investigators cannot “conclusively determine” which information may have been stolen but caution demanded that they assume all information on the affected server had been compromised, he said, although no health records were obtained.

One of the compromised sites was used to recruit physicians, registered nurses and other health professionals on behalf of health employers. The others helped with vacation coverage for rural doctors and registered care aides working in places including long-term care facilities.

For now, anyone wanting to register for the programs won’t be able to do so online but can contact the programs directly, McMillian said.

Health Minister Adrian Dix said the government was determined not to let the attack affect recruitment.

He said that “obviously there’s an impact” when authorities had to inform people that their information may have been compromised and to offer them protection.

“But we also know that people want to come and work in B.C. We have a very successful program to reach out.”

Dix said the government is focused on tackling staffing challenges in health care.

“I assure everyone considering applying that your information will be protected. HEABC is committed to strengthening their IT security protocol and has put in place the necessary resources to support everyone potentially affected by this attack in the weeks and months to come.”

McMillian said they learned of the hacking on July 13 as part of “ongoing monitoring” and later established that the hackers were “in the system” from May 9 to June 10.

He said the organization has not been contacted by the perpetrators.

McMillian said police, the Office of the Information and Privacy Commissioner for B.C., the Health Ministry and the Canadian Centre for Cybersecurity have been informed of the breach.

He said the potentially compromised information has all been transferred to a “clean server” with extra security.

Dix said all existing users of the programs have access to their accounts through temporary websites set up on the clean server.

The Health Employers Association is the bargaining agent for 200 publicly funded health-care employers, representing 170,000 unionized workers, including physicians, nurses, health science workers and paramedics.

This report by The Canadian Press was first published Aug. 1, 2023.

Ashley Joannou, The Canadian Press

by The Canadian Press

Cyberattack on B.C. health websites may have taken workers’ personal information

What's Trending