Ontario investigating potential security breach associated with COVID-19 vaccine portal
Ontario authorities are investigating reports of a possible security breach associated with the provincial COVID-19 vaccine booking portal.
A spokesperson for the Solicitor General confirmed the government has received multiple reports of spam text messages received by individuals who scheduled appointments or accessed vaccine certificates through the COVID-9 immunization system.
"Ontarians should be aware these texts are financial in nature and that the government will never conduct a financial transaction through these methods," Marion Ringuette said in a statement.
"The government takes allegations of fraud very seriously and is aggressively investigating these reports with our partner ministries, the Ontario Provincial Police (OPP) and others."
The OPP has confirmed to CTV News Toronto that it is investigating reports of "spam text messages from individuals who have utilized the COVID-19 booking system for appointments or to access vaccine certificates."
"As this investigation is ongoing, it would not be appropriate to comment further at this time," Bill Dickson, Corporate Communications Manager with the OPP, said.
One Ontario resident told CTV News Toronto that she received two text messages addressed to her 12-year-old daughter on Nov. 14.
"We get phishing text messages all the time from different things, but this one was interesting because it was my daughter, who was 12 years old. It was in her name and it was really just asking us to reply to accept money," Carla Embleton said.
Embleton said she became concerned that her daughter's personal information may have been compromised.
"What really triggered it for me was the spelling of her name. It was her name, her full name with middle name, and her middle name was fully capitalized and the only time I've ever seen that was on her vaccine passport."
Mike Primeau from Ottawa received a similar text to his cell phone a few days later, also addressed to his son. In the text, Primeau is told that he has been sent "a reimbursement of $163.36" and is asked to reply to receive the payment.
A spam text message is seen in this photograph provided to CTV News Toronto by Mike Primeau.
Primeau told CTV News Toronto that he asked his son if they had registered for anything together that could have led to the phishing text.
"At that time he couldn't think of anything, any source of it," he said.
After seeing media reports about the potential breach, Primeau realized the text could be related as his son's full name, including his middle name, was used. While his son was registered to get the vaccine over the summer, the entire family did log back into the system to download their proof of vaccination when the provincial mandate came into effect.
"It worries me more around, you know, what kind of information could they gather from that first name, last name, date of birth, health card," he said, while adding that he knows those responsible for the website are doing everything they can to keep it secure. "Maybe there's healthcare fraud involved, but as far as using (the portal) again, I probably would."
On social media, multiple people have reported receiving text messages with either their full names or the full names of their children. However, it seems like the requests for each text are slightly different.
It is unclear when officials were first notified of the potential breach, but Premier Doug Ford told reporters Monday that he received a briefing about the investigation over the weekend.
"I've had a conversation with my chief of staff, principal secretary and secretary of cabinet and they have all hands on deck on all our ministry especially or Ministry of Health, and I'm confident with the group that we have down there," Ford said, adding that "cybersecurity is so important."
"They're getting more technical, more sophisticated every single day."
News of the potential security breach came as Ontario announced that COVID-19 vaccine appointments will become available for children between the ages of five and 11 as of Tuesday.
Families will be able to book appointments through the COVID-19 vaccine portal, as well as other avenues such as pharmacies and primary care offices.
While asked about the incident by a reporter, Solicitor General Sylvia reiterated Ford's confidence in the system.
"This investigation, and any investigation when we hear of potential breaches, we investigate thoroughly," Jones said.
"We are doing that now. We have confidence in the booking system that there are no concerns and as I said, we will continue to investigate all issues as we hear from local individuals."
CTVNews.ca Top Stories
Serial sexual offender linked to unsolved 1970s homicides of four Calgary girls, women
An investigation into unsolved historical homicides from the 1970s has linked the deaths of two girls and two young women in and around Calgary to a now-deceased serial offender.
Woman with liver failure rejected for a transplant after medical review highlights alcohol use
For nearly three months, Amanda Huska has been in an Ontario hospital, part of it on life support, because of severe liver failure. Her history of alcohol use is getting in the way of her only potential treatment: a liver transplant.
$500K-worth of elvers seized at Toronto airport
Fishery and border service officers seized more than 100 kilograms of unauthorized elvers at the Toronto Pearson International Airport on Wednesday.
Wildfires are dampening against cool, rainy weather, but there's plenty left to contain
An opportune system of cool, wet weather Friday is dampening the spread of wildfires across Western Canada, but there's still plenty of work for responders and residents alike.
Dabney Coleman, actor who specialized in curmudgeons, dies at 92
Dabney Coleman, the mustachioed character actor who specialized in smarmy villains like the chauvinist boss in '9 to 5' and the nasty TV director in 'Tootsie,' has died. He was 92.
Information commissioner faces $700K funding shortfall, says system is 'overwhelmed'
Canada's information commissioner says her office is facing a $700,000 funding shortfall that could impact its ability to investigate complaints about government transparency and accountability.
Backlash over NFL player Harrison Butker's commencement speech has reached a new level
The NFL is distancing itself from controversial comments by Kansas City Chiefs kicker Harrison Butker during a recent commencement address.
Craig Berube named as next head coach of Toronto Maple Leafs
The Toronto Maple Leafs have named Craig Berube as their new head coach.
B.C. man 'attacked suddenly' by adult grizzly near Alberta boundary: RCMP
A B.C. man is recovering from multiple injuries after he was "attacked suddenly" by an adult grizzly bear near Elkford Thursday afternoon.