Canadian laboratory advised to pay ransomware demand despite industry best practice

LifeLabs said it successfully retrieved 85,000 stolen lab results after negotiating with the hackers

A Canadian laboratory has agreed to pay hackers in order to retrieve some 85,000 stolen data records after being advised to do so by cyber security experts.

LifeLabs, a provider of clinical laboratory services, said that information on approximately 15 million customers was also potentially accessed.

The company was breached in October when an unnamed party infiltrated the lab's computer systems. In an open letter, the company said that it involved customer names, addresses, emails, logins, passwords and health card numbers.

There were also 85,000 test results stolen in the breach which impact customers located in Ontario from 2016, or earlier, according to the firm.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

LifeLabs CEO Charles Brown said that it had taken several steps to protect the stolen information, with one of those being "retrieving the data by making a payment". It did this on the advice of "experts familiar with cyber-attacks" and after negotiations with the hackers.

Related Resource

The workers' experience report

How technology can spark motivation, enhance productivity and strengthen security

Download now

There isn't much detail as to how the perpetrators gained access to the lab's systems but it does further highlight how prolific ransomware has become. The practice of paying hackers has been discouraged by many in the industry as it not only helps to directly fund a criminal enterprise but there is no guarantee that data will be returned after payment.

It was even revealed recently that 40% of security professionals believe that the handing over of funds to hackers should be criminalised, according to an AT&T security study.

There was also a question of whether LifeLabs should face regulatory action, as it only informed British Columbia of the breach on 28 October. However, discussing why the information has only just come to light, Health Minister Adrian Dix told CBC that there was a concern about a secondary attack.

"Naturally, all of us would have wanted immediately for people to be informed, as quickly as possible," he said. "The only reason there was a delay was to ensure that information that hadn't been compromised wouldn't be compromised and that information that could be protected would be protected."

Featured Resources

How inkjet can transform your business

Get more out of your business by investing in the right printing technology

Download now

Journey to a modern workplace with Office 365: which tools and when?

A guide to how Office 365 builds a modern workplace

Download now

Modernise and transform your sales organisation

Learn how a modernised sales process can drive your business

Download now

Your guide to managing cloud transformation risk

Realise the benefits. Mitigate the risks

Download now
Advertisement

Most Popular

Visit/operating-systems/microsoft-windows/354789/microsoft-pulls-disastrous-windows-10-security-update
Microsoft Windows

Microsoft pulls disastrous Windows 10 security update

17 Feb 2020
Visit/mobile/28299/how-to-use-chromecast-without-wi-fi
Mobile

How to use Chromecast without Wi-Fi

5 Feb 2020
Visit/business/business-operations/354790/hp-shareholders-invited-to-come-dine-with-xerox
Business operations

HP shareholders invited to come dine with Xerox

17 Feb 2020
Visit/operating-systems/27717/how-to-fix-a-stuck-windows-10-update
operating systems

How to fix a stuck Windows 10 update

12 Feb 2020