After learning of a possible data breach involving a former employee, Unity Health Toronto has begun to notify patients their medical records may have been compromised. With roughly 150 patients potentially affected, the hospital network issued a statement apologizing to individuals along with the breach notification.
The incident happened when a former employee of Nuance Communications, a company used to transcribe clinical notes at St. Michael’s Hospital, allegedly held on to patient data after leaving the transcription company. The former employee seemingly converted into a malicious threat as they allegedly attempted to use the withheld records in return for a ransom from Nuance.
The alleged events of the breach took place in India where Nuance summoned the help of lawful intervention against the malicious actor. St. Michael’s Hospital has since reported the incident to Ontario’s privacy commissioner on top of performing their own investigation.
The data which contained patient names, medical history, and other personal health information appears to be in safe hands as officers have seized the device where the data was being stored.