Phishing leads to loss of records in Nova Scotia

HALIFAX – Nova Scotia Health Authority (NSHA) is in the process of sending out notifications to 2,841 patients and next of kin about a potential privacy breach regarding personal health information.

The possible breach was discovered by NSHA’s information technology security team when an employee’s email account was compromised by an unauthorized outside user performing a phishing attack. Phishing emails often look like legitimate messages but the sender can gain access to an individual’s email account if they enter their log-in information in the link provided.

Everyone who was possibly affected will hear directly from NSHA; the authority will be available to discuss the details of the possible breaches of confidentiality with them.

NSHA has notified the Office of the Information and Privacy Commissioner of Nova Scotia and will work with the office on any recommendations they may offer as a result of this potential breach.

Staff and physicians across the organization require varying degrees of access to information to provide care to patients. The organization takes several steps to ensure that all employees understand their obligation to protect patient information, as well as to monitor and identify inappropriate activity.

These steps include:

• Pledges of confidentiality signed by all staff, and standard orientation regarding privacy across the province.
• Ongoing in-person education for managers and front-line staff about cyber scams and phishing emails.
• Educating staff about the importance of appropriate electronic storage of patient health information and proper maintenance of e-mail files.

NSHA takes any breach of confidentiality seriously, and thoroughly investigates potential inappropriate access.

About Nova Scotia Health Authority
Nova Scotia Health Authority (NSHA) provides health services to Nova Scotians and a wide array of specialized services to Maritimers and Atlantic Canadians. NSHA operates hospitals, health centres and community-based programs across the province. Our team of health professionals includes employees, doctors, researchers, learners and volunteers. We work in partnership with community groups, schools, governments, foundations and auxiliaries and community health boards. Visit www.nshealth.ca for more information.