Albertans' personal data up for sale after hackers extort health company
Personal information belonging to Albertans has been leaked online and posted for sale after a health care company was hacked, CTV News has learned.
Ontario-based Homewood Health told CTV News it was hacked earlier this year and has recently begun contacting affected companies and agencies whose information may be compromised, including several in Alberta as well as in B.C. and Ontario.
It's not clear how many Albertans were affected by the breach.
CTV News has confirmed at least some of the information leaked online is authentic, though the bulk of the data is still on the auction block at Marketo, a site that describes itself as a "leaked data marketplace."
The data appeared to draw hundreds of bids from prospective buyers.
"An investigation is currently underway and actively involves external cybersecurity and privacy experts working in consultation with law enforcement and provincial privacy authorities," reads a statement from Homewood Health.
"These experts are working diligently to understand how the information was obtained and what information has been affected."
Alberta's Workers' Compensation Board and the City of Spruce Grove told CTV News they were among those affected by the leak.
"We are still confirming the extent of the breach, but understand it includes information supplied by WCB-Alberta employees who accessed support from their employee and family assistance program," reads a statement from WCB-Alberta, noting an investigation is ongoing.
"We have been assured that the provider is taking the appropriate steps to investigate and respond."
The City of Spruce Grove says it was informed Friday morning that it was affected by the breach.
"The information accessed was general in nature about the City and not related to personal information," reads a statement from the city.
Homewood Health says it will be notifying those affected by the breach but wouldn't specify how many people that would be.
It previously told CTV News Vancouver that state-sponsored Chinese hackers Hafnium, who victimized thousands of companies earlier this year, were likely behind the breach.
The Office of the Information and Privacy Commissioner of Alberta says it was initially unaware of the breach but has since been in contact with Homewood Health and is awaiting an official report.
'LEAKED DATA MARKETPLACE'
Marketo, which has the same name as an online marketing company by Adobe but bears no connection, calls itself a “leaked data marketplace” but it’s perhaps more accurate to describe it as an online clearinghouse for stolen information.
The first and most prominent listing currently on its website is for Homewood Health, and it showed nearly 300 bids have purportedly been made for the information so far.
When CTV News contacted the site, a representative countered Homewood’s description of events, insisting they researched the weaknesses of Homewood Health and other companies and attacked them directly, insisting they did not acquire the data as part of the Hafnium hack.
“I got to say it right away that we just sell company data. We do not have the intention to harm customers or clients of this company,” wrote a spokesperson identifying themselves as Mannus Gott. “If the company understands and is willing to accept responsibility for the leak, there will be no publication. Otherwise, we are not responsible for the safety of this data.”
They say on Thursday, some of the data will be sold and the rest will be published.
A Homewood Health representative told CTV News Vancouver the hackers had tried to extort the company over the information, characterizing it as a “dark web” scheme, but the Marketo website can be accessed by anyone with an internet connection.
“This isn't only on the dark web, Marketo group's site exists on the clear web too, so it's very easily accessed," explained online threat analyst Brett Callow, who works for Emsisoft on Vancouver Island.
“These types of incidents are extremely common and there are about 2,500 organizations that have had their data stolen and published on sites like this -- and that just within the last couple of years."
With files from Penny Daflos
Edmonton Top Stories
CTVNews.ca Top Stories
After the most expensive election in Canadian history resulted in little change politically, many are asking whether it was worth the $610-million price tag and where else that money could have been spent.
Inside hospitals across Saskatchewan, which has one of the lowest vaccination rates in the country, health-care workers are reporting a worsening crisis, with record-breaking COVID-19 hospitalizations pushing the health-care system to the brink.
Long-term care outbreaks are rising, and provinces have different strategies for keeping COVID-19 out
As the fourth wave continues across Canada and community spread climbs, outbreaks are also on the rise inside Canada’s long-term care homes, leading experts to stress the importance of staff being vaccinated — an issue which varies province to province.
A source close to the family of Brian Laundrie says Gabby Petito's fiance, who is now the subject of a federal warrant, left his parents' Florida home last Tuesday without his cell phone and wallet.
Canada has now fully vaccinated 79.46 per cent of the country's eligible population.
British actor Tom Felton, known for his portrayal of Draco Malfoy in the 'Harry Potter' movies, collapsed while playing a celebrity golf exhibition Thursday at the Ryder Cup.
Canadian fashion model Linda Evangelista says she's been left 'permanently deformed' from a cosmetic procedure that she had approximately five years ago.
The corporate entities of SNC-Lavalin Inc. and SNC-Lavalin International Inc., as well as two former senior executives of the Quebec-based firms have been charged with a series of fraud and forgery offences by the RCMP.
Canada saw only a slight increase in the volume of foreign nationals entering the country in the first week after the border opened to those who are fully vaccinated against COVID-19.
Alberta reported 1,660 new cases of COVID-19 and 17 new deaths on Thursday.
Alberta Health is investigating whether an Edson party advertising itself as a “get COVID” event to build up natural immunity to the virus actually happened.
Some Calgary businesses say while the new city vaccination bylaw doesn't change what they do, it does ease some of the pressure on front line staff.
Saskatchewan broke COVID-19 hospitalization records again on Thursday, reporting 273 patients in hospital with 58 in intensive care.
Saskatoon City Council will look at a committee recommendation to allow parking patios to operate through the winter, making them a year-round amenity.
A Saskatoon judge has ruled in favor allowing a father to have his child vaccinated despite the mother being opposed to her child getting the shot.
'Unbelievably heartbreaking': Sask. nurse left waiting for transplant as province suspends organ donation program
Krystal Graham has been on the liver transplant waitlist for about a year. Now, she says she is concerned COVID-19 will delay her life-saving surgery even longer.
The Melville Millionaires have postponed hockey games until further notice after a positive COVID-19 case associated with the team.
Six-year-old Nygah Eashappie is pretty subdued about his newfound fame. The Regina boy is the latest to model in advertisements for local clothing brand; 22Fresh.
The first twenty-four hours following New Brunswick's rollout of new pandemic restrictions have been rocky for some of the businesses tasked with enforcing the new rules.
Health officials in Nova Scotia are reporting the province’s 95th death related to COVID-19, along with 41 new cases and 20 recoveries on Thursday, as the number of active cases in the province rises to 147.
Health officials in New Brunswick are reporting 52 new cases of COVID-19 on Thursday, along with 35 recoveries, as the number of active cases in the province rises to 574.
A possible loophole in B.C.’s vaccine card registration system is making the rounds on social media.
The Vancouver Canucks are banking on the capacity limits at Rogers Arena being lifted in time for the regular season home opener.
In a significant upset, the long-time Conservative incumbent in Richmond Centre has lost her seat to a political newcomer, according to the CTV News Decision Desk.
An investigation into the shooting of a white cow moose in northern Ontario last fall has been closed and officials say no charges will be laid.
A 17-year-old from Greater Sudbury has been charged with attempted murder in connection with the stabbing of a woman downtown last week.
CTV News has learned Timmins police have a suspect in custody after one person was killed and two others were injured in a shooting in Schumacher overnight.
A Manitoba critical care doctor and infectious diseases specialist remains cautiously optimistic when it comes to the impact of the fourth wave in Manitoba.
A multi-car crash on a Manitoba highway on Wednesday resulted in police arresting a driver on impaired driving and weapon charges.
Five businesses in Manitoba received tickets last week for not following public health orders.
The cases were among 832 new cases found in B.C. over the past 24 hours, according to the Ministry of Health.
The president of the Cedar Hill Golf Club says a report from District of Saanich staff recommending changes to the operation df Cedar Hill Golf Course will hurt the club and its members.
Health officials on Vancouver Island have declared clusters of COVID-19 at four more schools in the South Island. There are now five active clusters at schools in the region.
An Ontario man who had a faulty gas metre and racked up at $1,000 bill says was shocked when the was told he would still have to pay the bill.
Someone in Ontario won more than $21 million in Wednesday’s LOTTO 6/49 draw but has yet to check their ticket.
Unvaccinated MPPs could be prevented from entering Queen’s Park when the legislature resumes in October unless they get tested for COVID-19.
After just a few hours of debate, Quebec's National Assembly voted unanimously Thursday evening to pass a new bill that would prohibit anti-vaccine protesters from demonstrating near schools, daycares, and hospitals -- an offence punishable by a fine of up to $12,000.
Amid major staff shortages, Quebec will cut large cheques to health-care workers in a bid to strengthen a public network put under serious pressure by the pandemic.
Quebec kids were at the heart of a heated exchange Thursday over language laws -- specifically, English-speaking kids and whether they're really leaving school with functional French.
Indigenous Services Canada (ISC) is reporting that residents of the Saugeen First Nation were given expired doses of the Pfizer COVID-19 vaccine for nearly a month before the error was caught.
Provincial police are investigating after one person was killed in a farming accident in Norfolk County.
Two families are fighting for the return of their dogs - one of them a service animal - seized by the municipality because they resemble pit bulls.
A former Kitchener MP has pleaded guilty to assault charges.
Waterloo Region’s big Bavarian festival officially kicks off on Friday.
Liberal incumbent Tim Louis will retain his seat in Kitchener-Conestoga.