Regina / 980 CJME
Jan 8, 2021 10:20 AM
Saskatchewan’s privacy commissioner has confirmed that last year’s eHealth ransomware attack resulted in one of the biggest privacy breaches in the province’s history.
In a report issued Friday, Information and Privacy Commissioner Ron Kruzeniski outlined how it happened.
On Dec. 20, 2019, a Saskatchewan Health Authority (SHA) employee opened an infected file from an email on their personal device. Because it was connected to an SHA computer, the infected file was able to execute ransomware on the computer, and a “multi-phase exploit” took place for more than two weeks, which affected fileshares on the network that holds around 50 million files belonging to eHealth, SHA, and Health Ministry documents.