Ransomware Attackers Stole Patient Data from TransForm in Ontario Hospitals

TransForm, a shared service provider that supports five hospitals in Erie St. Clair, Ontario, has released an update on the cyberattack that disrupted its operations in October. The organization confirmed that the incident was a ransomware attack and that the perpetrators exfiltrated a database containing information on 5.6 million patient visits.

According to TransForm, the database contained data from 2010 to 2021, and included information such as patient names, dates of birth, health card numbers, visit dates, visit types, and visit locations. The database did not contain any clinical or financial information, such as diagnoses, treatments, test results, or billing information.

TransForm said that it is working with law enforcement and cybersecurity experts to investigate the incident and recover the stolen data. The organization also said that it has notified the affected hospitals and the Information and Privacy Commissioner of Ontario, and that it will provide identity theft protection services to the impacted individuals.

The ransomware attack on TransForm affected the IT systems of Bluewater Health, Chatham-Kent Health Alliance, Erie Shores HealthCare, Hôtel-Dieu Grace Healthcare, and Windsor Regional Hospital. The hospitals had to resort to manual processes and paper records to continue providing care to patients. Some elective surgeries and procedures were also postponed or canceled as a result of the attack.

“We did not pay a ransom and we are aware that data connected to the cyber incident has been published.” – TransForm

TransForm apologized for the inconvenience and distress caused by the incident and assured it is taking steps to enhance its security measures and prevent future attacks. The organization also urged the public to be vigilant and monitor their credit reports and bank statements for any suspicious activity.

Keep in touch with our blog to read the latest news and innovations in the cybersecurity world.