Cyberattack hits vaccine records for thousands of Durham Region children: CTV News investigation
The personal information of more than three thousand children in daycares throughout Durham Region was stolen in a cyberattack early this year that CTV News Toronto has learned is larger than previously known.
That data from some 80 daycares, which also included the detailed vaccination records of some 200 children, was recently discovered on a website with ties to a Ukrainian group believed to be involved in ransomware attacks that was raided by police in June.
“That it’s out there for anybody to see is a little jarring,” Chris Perera said after learned his two-year-old child’s vaccine record was among the files that had been taken.
He said he had been warned in general by Durham Region that his data may have been affected, but he wished they had been more specific so that he would be able to better respond.
“When you get a letter from the region saying your information has been leaked, your head is going so many different ways, I wish they could have said specifically what’s out there,” he said.
Records seem to indicate that the personal information of some 3200 children and their families were taken as part of a file transfer that appears to be related to the uploading of the children’s vaccination status to the region’s health department.
Some day cares have been told that they are to cease sending that detailed vaccination information for now.
Nadine Koch, a supervisor at Kindertots Child Care Centre in Ajax, said her daycare has taken on keeping track of vaccination records by themselves.
“We’re just handling it on our own because we haven’t been told when to submit it. It’s been put on the back burner,” she said.
Koch said the region had informed them that they were among the daycares affected in April, the month after the breach was first discovered.
The breach appears to be related to the Accellion file transfer system, Brett Callow a threat analyst with Emsisoft told CTV News Toronto.
“That data somehow ended up in the hands of a group called CLOP,” he said.
The Ukrainian police said in a statement on their website they believe CLOP is behind attacks from South Korea to the United States, pointing to attacks in 2021 on the personal data and financial reports of Stanford University Medical School, the University of Maryland, and the University of California.
News of the arrests was sure to disrupt the group to some extent, but the group’s presence continues online, he said.
The Accellion software has been fixed, he said.
Durham Region has said it took “prompt steps” to contain the incident, which it said was caused by a vulnerability in a third party software.
“We have stopped using the third party software involved,” the region has said.
Perera said he is not as bothered about the information being online as he might be in another circumstance, as the vaccination data of his two-year-old isn’t going to help online predatorsin further attacks, including attempts at identity theft.
But he said it’s important that the region’s computers are secure.
"Cybersecurity needs to be a priority, especially when it’s an infrastructure that communicates such specific information."
CTVNews.ca Top Stories
CFIA monitoring for avian flu in Canadian dairy cattle after U.S. discoveries
The Canadian Food Inspection Agency is encouraging veterinarians to keep an eye out for signs of avian influenza in dairy cattle following recent discoveries of cases of the disease in U.S. cow herds.
Mandisa, Grammy award-winning 'American Idol' alum, dead at 47
Soulful gospel artist Mandisa, a Grammy-winning singer who got her start as a contestant on 'American Idol' in 2006, has died, according to a statement on her verified social media. She was 47.
Senators reject field trip to African Lion Safari amid elephant bill study
The Senate legal affairs committee has rejected a motion calling for members to take a $50,000 field trip to the African Lion Safari in southern Ontario to see the zoo's elephant exhibit.
DEVELOPING G7 warns of new sanctions against Iran as world reacts to apparent Israeli drone attack
Group of Seven foreign ministers warned of new sanctions against Iran on Friday for its drone and missile attack on Israel, and urged both sides to avoid an escalation of the conflict.
'It could be catastrophic': Woman says natural supplement contained hidden painkiller drug
A Manitoba woman thought she found a miracle natural supplement, but said a hidden ingredient wreaked havoc on her health.
After hearing thousands of last words, this hospital chaplain has advice for the living
Hospital chaplain J.S. Park opens up about death, grief and hearing thousands of last words, and shares his advice for the living.
Vancouver firefighter in rehab at home after losing leg to flesh-eating infection overseas
A family trip took a frightening turn for Christopher Won when he was diagnosed with flesh-eating disease while in Hong Kong and now, after weeks of treatment overseas, the Vancouver firefighter is back home recovering.
WATCH Video shows dramatic police takedown of carjacking suspects chased through parking lot north of Toronto
Police have released video footage of a dramatic takedown of a group of teens wanted in connection with an attempted carjacking in Markham earlier this month.
WHO likely to issue wider alert on contaminated cough syrup
The World Health Organization is likely to issue a wider warning about contaminated Johnson and Johnson-made children's cough syrup found in Nigeria last week, it said in an email.