No guarantee of privacy breach in year-old eHealth malware attack ckom.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from ckom.com Daily Mail and Mail on Sunday newspapers.
Article content
A months-long forensic investigation was unable to rule out a privacy breach from a ransomware attack against eHealth Saskatchewan one year ago.
In a news release Tuesday, eHealth reported that “a breach of personal health information has potentially occurred.” It said there was no evidence that private information was compromised, but that it also couldn’t be ruled out.
We apologize, but this video has failed to load.
Try refreshing your browser, or eHealth cyberattack may have compromised personal data: investigation Back to video
The Office of the Saskatchewan Information and Privacy Commissioner has also been looking into the attack and is preparing to release its own investigation.
Following the forensic investigation, eHealth advises that a breach of personal health information has potentially occurred. The breach impacted information on systems administered by eHS for the SHA and Ministry of Health. While the forensic investigation rendered no evidence that personal health information was compromised, the investigation was unable to rule out a breach of personal health information. The inability to absolutely verify that no privacy breach occurred is leading to public notification of a potential privacy breach involving personal information or personal health information. Upon discovery of the malware attack, eHealth Saskatchewan managed to contain and eliminate the malware and restore compromised files. However, the conclusion of a likely privacy breach follows findings in the forensic investigation that some files were sent to a suspicious IP address.