Suspected cyberattack in N.L. hits 'brain' of province's health-care system
A suspected cyberattack on Newfoundland and Labrador's health network has led to the cancellation of thousands of medical appointments across the province and forced some local health systems to revert to paper.
The "brain" of the network's data centre, operated by Bell, has been damaged, including the main and backup computer systems, Health Minister John Haggie told reporters Monday. He said the "possible cyberattack by a third party" was first detected Saturday.
"It has taken out the brain of the data centre .... Our main aim here now is to mitigate the effect and maintain some continuity of service for the people of this province," Haggie said.
Newfoundland and Labrador's Eastern Health region was hardest hit, leading to the cancellation Monday of all non-emergency medical appointments and procedures. Eastern Health CEO David Diamond said his agency has lost access to everything from basic email to diagnostic images and lab results, adding that non-urgent medical procedures are likely to be cancelled again on Tuesday.
Physicians, he added, have told him that without X-rays and CT scans being available electronically, it would be safer to delay appointments and procedures for several days. "We can't handle the same volume in a paper-based system, so it's safer to reschedule," he said.
The health authorities in western Newfoundland and Labrador hadn't been hit as hard, while the health authority in central Newfoundland was affected but less severely than in the eastern region, Haggie said.
Haggie, however, decline to comment about whether the damage was due to what's known as a ransomware attack -- in which hackers demand payment in exchange for restoring access. The minister would only say the investigation is ongoing.
Steve Waterhouse, a former information systems security officer with the Defence Department, said in an interview Monday the damage to Newfoundland and Labrador's health system bears all the hallmarks of a ransomware attack. Health systems are prime targets for cyberattacks because they are essential services and the public can't tolerate losing access to medical care for extended periods, he said.
"I believe it is ransomware that got inside of that (computer system) and crippled the operation .... It's highly probable it's ransomware, as this (phenomenon) is spreading across the country," Waterhouse said.
The Canadian Centre for Cyber Security -- a division of the federal government's Communications Security Establishment -- issued an alert in October 2020 warning of an increasing risk of cyberattacks using ransomware on Canadian health systems.
Evan Koronewski, a spokesman for theCommunications Security Establishment, said in an email, "We assess that cybercriminals will almost certainly continue to jeopardize patient outcomes and wider public health efforts by deploying ransomware for financial gain against a vulnerable health sector, including the COVID-19 vaccine supply chain."
He added that the cyber centre has noticed a rise in threats related to the COVID-19 pandemic, including the threat of ransomware attacks on the country's front-line health-care and medical research facilities. He said cybercriminals have shifted toward targeting high-value, large-scale enterprises, known as "targeted ransomware" or "big game hunting."
In October 2020, reports indicated Montreal's Jewish General Hospital had to postpone appointments after a cyberattack forced the local health board to disconnect its servers from the internet. Earlier that year, hackers damaged the computer systems of three Ontario hospitals, using malware known as "Ryuk."
Haggie said it's too soon to know if his province's security measures had shortcomings or failed to heed the federal warnings, and he said there will be a post-mortem to examine these issues.
"We'll find out, but it won't be tomorrow," he said.
Sarah Stoodley, the province's minister of digital government, was asked by the Opposition during question period on Monday whether the province has a policy on paying hackers a ransom to remove the malicious software.
"I'm not aware of such policies, but from a security and information technology perspective, even if we had policies, I wouldn't recommend we table them in the House of Assembly," she replied.
This report by The Canadian Press was first published Nov. 1, 2021.
-- By Michael Tutton in Halifax.
CTVNews.ca Top Stories
Canada to launch 'national action plan' to fight auto theft
The federal government is launching what it calls its 'national action plan' to combat auto thefts, which will include stronger penalties for thieves, and increased information sharing between police agencies, government officials and border enforcement.
U.S. Supreme Court rejects appeal from former Guantanamo detainee Omar Khadr
The U.S. Supreme Court on Monday rejected an appeal by a Canadian-born former Guantanamo detainee who was seeking to wipe away his war crimes convictions, including for killing a U.S. soldier in Afghanistan.
What is BORG drinking, and why is it a dangerous trend? An expert explains
If you've been to a party lately and haven't seen someone drinking a BORG, you're likely not partying with college students.
Iran's president and foreign minister die in helicopter crash at moment of high tensions in Mideast
Iranian President Ebrahim Raisi and the country's foreign minister were found dead Monday hours after their helicopter crashed in fog, leaving the Islamic Republic without two key leaders as extraordinary tensions grip the wider Middle East.
Michael Cohen says he stole from Trump's company as defence presses key hush money trial witness
Former Donald Trump attorney Michael Cohen admitted Monday to jurors in the Republican's hush money trial that he stole tens of thousands of dollars from Trump's company as defence lawyers seized on the star witness' misdeeds to attack his credibility.
The world's best airline is paying staff a bonus of 8 months' salary
Singapore Airlines will reward its employees with a bonus worth nearly eight months of salary, a person familiar with the matter told CNN on Friday.
Investors watching posts from 'Crypto King' in the wake of fraud, money laundering charges
Former investors of the self-styled “Crypto King” say they are watching his social media accounts and worried his displays of wealth are signs he’s spending their money, even now, as another large expense tied to Aiden Pleterski has triggered a previously unreported lawsuit.
Woman, 35, in critical condition after her truck collided with a Via Rail train near Montreal
A 35-year-old woman is in critical condition after the pick-up truck she was driving was struck by a Via Rail passenger train Monday morning in Quebec's Monteregie region.
Jury finds Andrei Donet guilty of second-degree murder in stabbing death of Montreal teen
A jury has found a 21-year-old man guilty of second-degree murder in the stabbing death of Montreal teenager Jannai Dopwell-Bailey outside his school in 2021.