Ontario hospital recovering IT systems after cyber incident

Share post:

Another Canadian hospital has been hit by a cyber attack, the second in three months.

Ross Memorial Hospital in the eastern Ontario community of Lindsay, Ont., said in a statement today that, on the evening of Sunday, Feb. 5, it had to declare an IT emergency — called a Code Grey — because of a “suspected cyber incident.”

“The hospital has retained third-party cybersecurity resources to work with our technical experts to investigate the incident according to industry best practices,” the statement said. “Our systems restoration plan is also ongoing, and we are communicating with our local, regional, and provincial partners regarding next steps.”

In the meantime, it is trying to maintain delivery of critical hospital services. But patients with less urgent conditions are encouraged to consider alternate options for care, such as their primary health care provider, pharmacist, after-hours clinic, virtual care, or by calling the Telehealth Ontario line. After-hours clinics can often treat non-urgent and minor illnesses and ailments, such as earaches, sore throats, or provide prescription refills, the statement says.

The hospital is part of the Central East Local Health Integration Network in the Kawartha Lakes district. It serves an area with 100,000 residents. Lindsay is the largest community in the City of Kawartha Lakes.

A local news service, Kawartha411, calls the incident a suspected ransomware attack. People in the hospital’s emergency ward told it hospital staff can’t access the systems needed for treatment, while visitors and patients can’t use the parking machines.

The attack on Ross Memorial follows the December ransomware attack on Toronto’s Hospital for Sick Children. The LockBit gang apologized for that attack, saying its affiliates aren’t allowed to go after hospitals and certain critical infrastructure, and sent the hospital a data decryptor.

Last November, an expert panel on cybersecurity warned the provincial government that some parts of Ontario’s broader public sector — which includes hospitals — struggle to keep their IT systems secure.

Its report noted that the provincial health ministry has established six Regional Security Operation Center (RSOC) pilots for co-ordinated cybersecurity operations.

The post Ontario hospital recovering IT systems after cyber incident first appeared on IT World Canada.

Howard Solomon
Howard Solomonhttps://www.itworldcanada.com
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times.

SUBSCRIBE NOW

Related articles

North Korean hacker infiltrates US security vendor, loads malware

KnowBe4, a US-based security vendor, unknowingly hired a North Korean hacker who attempted to introduce malware into the...

CrowdStrike releases an update from initial Post Incident Review: Hashtag Trending Special Edition for Thursday July 25, 2024

Security vendor CrowdStrike released an update on from their initial Post Incident Review today. The first, and most surprising...

Security vendor CrowdStrike issues an update from their initial Post Incident Review

Security vendor CrowdStrike released an update from their initial Post Incident Review (PIR) today. The company's CEO has...

CrowdStrike CEO summoned by Homeland Security committee over software disaster

CrowdStrike CEO George Kurtz has been called to testify before the U.S. House Committee on Homeland Security following...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways