Hackers release corporate data stolen from London Drugs - Action News
Home WebMail Saturday, December 28, 2024, 04:34 PM | Calgary | 0.8°C | Regions Advertise Login | Our platform is in maintenance mode. Some URLs may not be available. |
British Columbia

Hackers release corporate data stolen from London Drugs

The retail and pharmacy chain had to shut down its nearly 80 stores across B.C., Alberta, Saskatchewan and Manitoba for a week after the cyberattack was reported on April 28.

The retail and pharmacy chain reported a cyberattack on April 28

A large storefront with the text reading 'London Drugs.'
Shoppers are turned away from London Drugs store during the fourth day of a nation wide store closure in Vancouver, B.C, on Wednesday May 1, 2024. Nearly 80 stores in Canada were shut for a week after a cyberattack was reported at the end of April. (Ben Nelms/CBC)

Retailer London Drugs says cybercriminals who stole files from its corporate head office last month have released some of the data after it refused to pay a ransom.

The company says the files may contain employee information, calling it a "deeply distressing" situation.

The statement from the company says it was "unwilling and unable" to pay a ransom to hackers it describes as "a sophisticated group of global cybercriminals."

It says London Drugs is notifying employees whose personal information may be affected and offering them credit monitoring and identity theft protection services.

The company says there is no indication that any patient or customer databases were compromised in the breach that forced London Drugs to shut down its stores across Western Canada after it was discovered on April 28.

It says it's currently reviewing the files that may have been stolen and it will contact affected employees to tell them what personal information was compromised.

London Drugs closed all 79 of its stores in B.C., Alberta, Saskatchewan, and Manitoba when it became aware of the cyberattack. All of the stores weren't open again until May 7.

The attack occurred around the same time B.C. government networks weretargeted in a "sophisticated'" cyberattack. In that case, officials blameda state or state-sponsored actor for the attempted breach.

On Wednesday, the B.C. First Nations Health Authority (FNHA) also announced it had been the victim of a cyberattack, and that some employee personal information was likely impacted in the breach.

At a press conference Thursday, B.C. Premier David Ebysaid that although the three attacks happened in close sequence, he doesn't think they are connected.

"They were close in time, but as best we understand it [they are] unrelated."

Eby said the province is supporting health authorities and other government agencies in "upping their game" around cybersecurity so they can prevent attacks from happening.

"There is a growing cyber-threat to information and to our financial security it's not unique to us, it's worldwide," he said.