IT Systems Outage
March 4, 2024 - NL Health Services is working with Equifax to directly notify applicable individuals that coverage for credit monitoring and identity theft protection services has been extended from two (2) years to five (5) years. This adjustment from 2-year to 5-year coverage ensures that all those individuals impacted by the privacy breach in October 2021, who chose to register for Equifax services prior to the deadline of September 30, 2023, receive the same length of coverage regardless of the type of information they had taken during the cyber-attack.
In October 2021, a cyber incident impacted critical IT systems supporting health-care providers across Newfoundland and Labrador. Since then, teams have been working around the clock to restore service and investigate the nature and impact of the incident.
Through an investigation into this cyber-attack, it was determined that the incident was a ransomware attack involving Hive ransomware, and that some personal information and personal health information belonging to clients and employees was taken from certain systems. For more information regarding the cyber-attack and preventative measures being taken, please see the Government of Newfoundland and Labrador’s report Overview: Cyberattack on the Newfoundland and Labrador Health Care System.
Due to the privacy breach resulting from the cyber-attack, clients, as well as current and former employees, physicians and locums, were offered access to register for free credit monitoring and identity theft protection services through Equifax Canada by September 30, 2023.
UPDATE: December 14, 2021 - Public Notification/Apology
Personal information and personal health information
Through the course of the ongoing investigation and review, it has been determined that some personal health information of our clients, and personal information of our current and former employees, physicians and locums was taken during the October 2021 cyber-attack that impacted health-care information technology (IT) systems across the province.
Health and safety remains our top priority. We deeply regret that this incident occurred, and are taking steps to protect the privacy of our employees, patients, and other members of our community.
Please read the following public notification of privacy breach of personal health information.
Employees and former employees can read the notification of a privacy breach of current and former employee’s personal information.
Further information, including a list of frequently asked questions, is available on the Government of Newfoundland and Labrador website.
If you have any questions about your personal information and personal health information as it relates to this cyber-attack, please contact the toll-free information line at 1-833-718-3021.
Privacy Resources
Privacy & Access to Information
The Personal Health Information Act (PHIA)
Access to Information and Protection of Privacy Act (ATIPPA)
Office of the Information and Privacy Commissioner
Credit Monitoring and Identity Theft Protection Services
Due to the privacy breach as a result of the October 2021 cyber-attack that impacted health-care information technology (IT) systems across the province, clients, as well as current and former employees, physicians and locums, were offered access to free credit monitoring and identity theft protection services through Equifax Canada. The deadline to register for these services was September 30, 2023.
Through the course of the investigation and review, it has been determined that some personal health information of our clients, and personal information of our current and former employees, physicians and locums was taken during the cyber-attack. At this time, there is no indication the information taken has been misused.
For clients:
Please refer to the public notification of privacy breach of personal health information for more information regarding this privacy breach.
For current and former employees, physicians and locums:
Please refer to the privacy breach of current and former employee’s personal information for more information regarding this privacy breach.
Affected clients, as well as current and former employees, physicians and locums, were offered access to register for credit monitoring and identity theft protection services through Equifax Canada, at no cost to them. Individuals who registered for these services can follow the most appropriate link below to learn more.
» For current and former clients
» For current and former employees, locums and physicians
The registration deadline to avail of these services was September 30, 2023.
PUBLIC SERVICE ANNOUNCEMENTS
12-14-2021 - Update on Impacted Personal Health Information
11-18-2021 - Public Notification of Privacy Breach of Personal Health Information
11-12-2021 - Central Health Service resumption effective Monday, November 15, 2021
11-11-2021 - UPDATE: Central Health Services from Thursday, November 11 to Monday, November 15, 2021
11-11-2021 - Statement from Andrée Robichaud, Central Health President & CEO
11-05-2021 - UPDATE: Central Health Services up to Monday, November 8, 2021
11-04-2021 - Central Health Services for Friday, November 5, 2021
11-03-2021 - Update: Central Health Services Affected by IT Systems Outage for November 4, 2021
11-03-2021 - Update: Central Health Mental Health and Addictions Services
11-02-2021 - Central Health Services Affected by IT Systems Outage for November 3, 2021
11-02-2021 - Update: Central Health Services Affected by IT Systems Outage
10-31-2021 - Update: Central Health Services Affected by IT Systems Outage
10-30-2021 - IT Systems Outage Impacting Central Health
Updates
Updates will be provided on this website as information becomes available.