By Ryan Young
Jan 12, 2021 6:44 PM
Changes have been made for eHealth Saskatchewan’s board of directors following Friday’s Office of the Saskatchewan Information and Privacy Commissioner’s (OIPC) report on the organization’s systems breach that occurred just over a year ago.
Health Minister Paul Merriman announced on Tuesday that he has appointed a new board of directors for eHealth Saskatchewan. The two-person board includes Ministry of Health Associate Deputy Minister Denise Macza and Ministry of Health Assistant Deputy Minister Billie-Jo Morrissette who will replace the previous board chair and directors.
Merriman said the updated board will provide closer oversight of eHealth and have been provided instruction to begin an independent review of the “governance, management and program operations at eHealth.”
MIL-OSI Canada: Government Responds to OIPC eHealth Report foreignaffairs.co.nz - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from foreignaffairs.co.nz Daily Mail and Mail on Sunday newspapers.
By Ryan Young
Jan 8, 2021 7:11 PM
The provincial government says the privacy commissioner’s findings from the eHealth Saskatchewan cyberattack reported on January 10, 2020 is “deeply troubling.”
The report, completed by the Office of the Saskatchewan Information and Privacy Commissioner (OIPC), contains 25 recommendations directed to eHealth, the Ministry of Health and the Saskatchewan Health Authority regarding the data breach and subsequent events.
On Friday afternoon, Health Minister Paul Merriman said Saskatchewan residents expect their personal health information to be secure and protected, but admitted that expectation failed when eHealth’s systems were breached.
“Everything about what happened at eHealth is concerning to me,” stated Merriman. “At the end of the day, the responsibility is mine with what happens with people’s personal health information, and I don’t take that responsibility lightly at all.”
In consultation with the Office of the Saskatchewan Information and Privacy Commissioner (OIPC), eHealth Saskatchewan (eHS), the Saskatchewan Health Authority (SHA) and the Saskatchewan Ministry of Health are providing an update on the eHealth malware attack reported in January 2020 and advising Saskatchewan residents that a privacy breach of personal health information may have occurred as a result of the malware attack. eHS, SHA and Ministry of Health take the safeguarding and protection of personal health information very seriously and immediately launched a months-long forensic investigation following the ransomware attack. Following the forensic investigation, eHealth advises that a breach of personal health information has potentially occurred. The breach impacted information on systems administered by eHS for the SHA and Ministry of Health.
REGINA The province cannot rule out a possible breach of personal health information following a malware attack on eHealth. The Office of the Saskatchewan Information and Privacy Commissioner (OIPC) is drafting a report on the incident. Saskatchewan’s eHealth records were accessed by hackers in early January 2020. The system stores Saskatchewan residents personal health data, and at the time, the government believed nothing was stolen. eHealth said on Tuesday that some of its files were sent to suspicious IP addresses. In February eHealth suggested personal files could have been sent to several suspicious IP addresses. “While the forensic investigation rendered no evidence that personal health information was compromised, the investigation was unable to rule out a breach of personal health information,” the OIPC, eHealth Saskatchewan (eHS), the Saskatchewan Health Authority (SHA) and the Saskatchewan Ministry of Health said in a news release.“The inability to