Cyberattacks And Data Breach: Reports

Complaint HR22-00036 (Re), PHIPA DECISION 210 (ON IPC)

Read more about the case: Complaint HR22-00036 (Re), PHIPA DECISION 210 (ON IPC)

Facts

A public hospital was the victim of a cyberattack during which the threat actor accessed numerous hospital systems. The IPC opened a file relating to this breach, and subsequently received four complaints from affected individuals.

During the data breach, the hospital took immediate steps to disable the affected accounts and fix the firewall issue that had allowed the access to occur. It severed its servers from the Internet and third-party networks, and isolated any systems showing signs of compromise. The hospital disabled all compromised accounts, including the one used by the threat actor, and forced password resets for all accounts in the hospital's active directory. The hospital was not able to contain the data that the threat actor had already transferred out before the hospital found out about the breach.