As we recently learned, Telus -owned Medisys Health Group was hit by ransomware and its customer data was exposed. However, its subsidiary, Copeman Healthcare , was also affected, resulting in the data of 60,000 customers being leaked.
Both companies were forced to pay ransom in order to regain control of their systems.
According to an email from Medisys, the hackers obtained demographic information, such as ages and addresses, as well as some personal health numbers. However, no financial information or social security numbers were stolen.
Medisys and Copeman, which are owned by Telus, say their security consultants paid the ransom and confirmed that the hackers did not breach the data.
However, it cannot be completely certain that the information is not being traded on illegal Dark Web.
The companies offered the customers affected by the incident five years of free identity theft protection.
The office of the Canadian federal privacy commissioner said via email that it is in continuous contact with Telus.
“Given the potential severity of the breach, we are seeking more information in order to determine next steps,” said Valerie Lawton from the Office of the Privacy Commissioner.
Medisys Health Group's website, which also provides a notice about its COVID-19 , describes itself as a national provider of preventive and corporate healthcare services. In addition to the Medisys brand, it also includes Copeman Health Centers and Horizon, which offers employee health services.
The Copeman website says that it operates in two locations in the Vancouver area and one in Calgary and Edmonton. The company was purchased by Medisys in 2014, four years before Telus bought Medisys.
