21–30 of 53 posts
“For customers who are concerned, LifeLabs has offered to cover one year of data protection that includes dark web monitoring as well as identity theft insurance.” That’s it? If I was Canadian I’d want to see execs going to jail and or their contract yanked. If they switched over to using a webapp or chromeos on the desktop things would probably be much more secure. But that’s not going to happen, cuz it’s owned by t…
Here is the CEO's letter to those 15 million or so victims: https://customernotice.lifelabs.com
Concerned Canadians could/should contact their government about this incident. I don't have a deep link but assume it's buried in this maze: https://www.priv.gc.ca/
> Through proactive surveillance, LifeLabs recently identified a cyber-attack I'm confused, how do you pass from "proactive surveillance" to "there's a ransom to pay"?
If you don’t live in Canada, you might not know that LifeLabs has a virtual monopoly on the lab business. If your doctor wants you to take a blood test, you go to LifeLabs. Whomever broke into their systems knows a great deal about the private health information of a large fraction of Canadians.
Do they perform some back-office analysis function for Quebec's public health system, or is this get another way Quebec is different from the rest of Canada? Here in Quebec we generally get our blood drawn for tests at a local public clinic called a CLSC, and can eventually view the results in a public government web system, but I'm not sure where the actual analysis happens.
Just a few months ago I had to take a series of tests with LifeLabs (blood, urine, physical, etc) to update my immigration papers. Did you know you cannot choose where to take these tests? You are more or less forced to use LifeLabs because the doctors designated by the IRCC (Immigration, Refugees and Citizenship Canada) only partner with LifeLabs to do these tests, it’s an ugly monopoly that is impossible to fight a…
“For customers who are concerned, LifeLabs has offered to cover one year of data protection that includes dark web monitoring as well as identity theft insurance.” That’s it? If I was Canadian I’d want to see execs going to jail and or their contract yanked. If they switched over to using a webapp or chromeos on the desktop things would probably be much more secure. But that’s not going to happen, cuz it’s owned by t…
Earlier quoted context omitted.
There's something in this story that doesn't ring true. You knew from the moment you walked into the laboratory that their data handling practices were inadequate and prone to being hacked/leaked. How? You tried to explain this to their secretaries and nurses. Why bother when it's obvious they can't/won't do anything about it? Why not contacting their management or IT?
To be fair to life labs, at least they don’t dox you aloud to an entire waiting room. I witnessed that happen to a few prominent financiers in Toronto while I was getting some bloodwork done. It was terrifying within about 5 minutes I had all the personal information I’d need to do some seriously nefarious things. This happens on most every occasion I visit a clinic in Canada. Nurses and secretaries do not care.
Not sure what the solution is.
I guess in the future with all these data breaches one will be able to get any private information on just about anyone by paying for it on the dark net. Basically there will be darknet data brokers who basically have unlimited inventory of information because they aggregate from the various data breaches.
Will people get spam calls from a call center in a low cost country that bring up your test results from LifeLabs and threaten to share them with your employer or significant other unless you pay up?
If not now, this will be happening in the near future.