Approximately 37,800 people have received notification that their privacy was breached in the October 2021 cyberattack on Eastern Health, Newfoundland and Labrador\u2019s largest health authority.<\/p>\n\n\n\n
The public was first notified in November 2021 that personal information and personal health information had been compromised during the cyberattack by an unauthorized third party.<\/p>\n\n\n\n
In a March 30, 2022, press release, Eastern Health stated that over 200,000 files were taken from a network drive in Eastern Health\u2019s IT environment, a portion of which contain patient information. Employee information was also compromised.<\/p>\n\n\n\n
To date, approximately 37,800 people have received notification that their privacy was breached, however Eastern Health expects the number to grow as investigation of the incident continues.<\/p>\n\n\n\n
Eastern Health has offered the breach victims credit monitoring and identity theft protection services for a period of two years from the date of enrollment, but no other compensation in relation to the breach.<\/p>\n\n\n\n
The Information and Privacy Commissioner has also been informed of the breach.<\/p>\n\n\n\n
Class actions addressing cyberattacks, cyber breaches, and failure to protect personal information have been gaining traction in Canadian court rooms, and a number of settlements arising from such breaches have been approved.<\/p>\n\n\n\n