Cornwall Ontario – The Eastern Ontario Health Unit was hacked according to a release on their website. Those concerned about their private information should read the release below.
No release was issued by the Cornwall Community Police Service in their police blotter about the crime.
Maybe the EOHU should spend less on their director(Dr. Paul pulls in over $300K yearly), the highest paid Sunshine List member in the region, and more on cyber security and public communications?
Photo: social media
Notice Of Cyber Attack
2017-11-03
WHAT HAPPENED? On September 29th, 2017, the Eastern Ontario Health Unit (EOHU) became aware that we were victim of a cyber attack. Our analysis of the hacking code suggests that the hackers accessed multiple websites maintained by the EOHU looking for credit card information which we do not collect. We immediately shut down our sites, changed the passwords, launched an internal investigation, and advised the Information and Privacy Commissioner of Ontario. The hackers also sent an email using an EOHU account about a contest to win an iPhone. The hackers did not use our newsletter subscribers list, but rather uploaded and used their own distribution list. We were able to identify the recipients of the contest email and alerted them that it was not legitimate and that clicking on it may have infected their computers with malware.
WHAT DID WE FIND? On October 12, 2017 our investigation discovered that the hackers were able to access certain databases used to schedule appointments and log calls to the health unit. In most cases, the information to which the hackers had access was limited to the caller’s name (first name and sometimes last name), appointment date, and purpose. In some cases, a telephone number but no other contact information was in the databases. Although these databases do not contain client medical records, some may contain notes. Where notes are sensitive in nature, and to the extent that we have contact information, we will reach out by telephone to affected individuals.
HOW ARE WE MOVING FORWARD? We are rebuilding, reconfiguring and incorporating new security measures into our websites to make them more secure against cyber attacks. We will also be consulting with web security specialists about any additional steps we can reasonably take to fortify our electronic information assets against attacks.
For questions, please contact our Privacy Officer at 613-933-1375 or 1 800 267-7120 ext. 218 between 8:30 – 4:30 Monday to Friday.
If you believe that your privacy rights have not been handled properly, you can also contact the Information and Privacy Commissioner of Ontario at:
Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario M4W 1A8
Telephone: 1 800 387-0073
When you have a bone to pick with someone you sure don’t mess around. Just curious and I’m sure you have your opinions. Is it Dr. Paul’s fault that he’s getting paid 300K? That’s what they are paying him. It’s probably to much but do you blame him for accepting it? I do agree that more money needs to be invested in cyber security. Especially in the times that we are living in at the moment.
It certainly isn’t his fault he’s being paid that. It certainly is his fault that most of his staff seem to be from Quebec with many having poor English skills. While I know it’s important for people to be bilingual this aberration doesn’t seem fiscally warranted. Again, look at his board. As hard as it is you have to try and take the politics out of medicine.
He also doesn’t send releases to the largest newspaper in his area of service. Does that make sense for an organization that’s supposed to be mandated to protect the public’s health? Reaching the most people possible is all that should count, especially if doing so costs a lot less than the means currently being implemented.
The EOHU should not be one man’s play toy. Honestly. It’s time to clean house.