Amid London Drugs hack, what to do if you think your data is at risk

After London Drugs confirmed in a statement that hackers are trying to ransom reams of stolen data — which may include employee information — stemming from a high-profile cyberattack, the spotlight is once again on the cybersecurity of Canadians.

amid london drugs hack, what to do if you think your data is at risk

“London Drugs is unwilling and unable to pay ransom to these cybercriminals,” the company said in a statement, which comes amid a growing number of hacks and security breaches in recent years.

The Canadian Centre for Cyber Security at the Communications Security Establishment (CSE) said in its National Cyber Threat Assessment report that ransomware was “certainly the most disruptive form of cybercrime and is a persistent threat to Canadian organizations.”

“A ransomware incident can incur significant costs on an organization and can disrupt things like the movement of essential goods and services and the delivery of critical services to Canadians. In some cases, a ransomware incident could lead to impacts on Canadians’ safety and wellbeing,” CSE spokesperson Ryan Foreman told Global News in a statement.

However, individuals and organizations can take several steps if they worry their data could be at risk.

What can individuals do?

The Financial Consumer Agency of Canada recommends that individuals regularly change their passwords, review bank account and credit card statements on a regular basis and report any errors on their credit reports and any unauthorized bank transactions immediately.

The agency said if you think you’ve been the victim of a data breach, contact your financial institution and any other companies where your account has been compromised. They also recommend contacting Canada’s two main credit bureaus, Equifax and TransUnion.

The email you need for the day's top news stories from Canada and around the world.

You can ask the credit bureaus to place a fraud alert on your credit report, which they will do after confirming your identity.

You can also contact the Canadian Anti-fraud Centre, which is jointly managed by the Royal Canadian Mounted Police, the Ontario Provincial Police and the Competition Bureau Canada.

Equifax says data breaches can differ in terms of sensitivity. A “least sensitive” data breach could involve a person’s name and address, in which case you should change your password immediately.

A “moderately sensitive” data breach could include email addresses, birth dates and card numbers such as the ones that can be found on your credit and debit cards. This is when Equifax recommends you notify your bank.

If there is a breach of your social insurance number, passwords to online accounts, financial account numbers and payment card security codes that are generally found on the back of your card, then the breach is considered “most sensitive.”

In such cases, it is recommended that you notify Equifax and TransUnion.

amid london drugs hack, what to do if you think your data is at risk
2:14 High-profile cyberattacks on the rise

What can organizations do?

The CSE said organizations should contact their Cyber Centre if they have been the victim of a ransomware attack.

“Develop, test, and implement a backup plan for your organization that ensures your backups use ultra-resilient media, such as offline, air-gapped, or immutable, to prevent ransomware from impacting your ability to recover,” Foreman recommended.

He said organizations also need to develop an incident response plan, run frequent system updates and vulnerability scans, and protect data with encryption.

Companies can also implement network security zones to control and restrict access to specific systems and data, and restrict data communication flows to certain systems or zones.

“(Organizations should) use secure administrative workstations to separate sensitive tasks, manage administrative privileges and accounts, and enforce multi-factor authentication (MFA) on accounts and devices wherever possible,” Foreman said.

The CSE also has a Ransomware Playbook that organizations can use to develop an action plan against such incidents.

amid london drugs hack, what to do if you think your data is at risk
2:05 Cybercriminals may release London Drugs data if ransom demands not met

The London Drugs case

In a statement, London Drugs said there remained no indication that customer or “primary employee” data was accessed. But it confirmed that the attackers were able to steal files from its corporate head office, some of which may include employee information.

“London Drugs is taking all available steps to mitigate any impacts from these criminal acts, including notifying all current employees whose personal information could be potentially impacted,” the company said.

The attackers are seeking a ransom of $25 million and threatening to post the stolen data on the dark web, according to threat analyst Brett Callow, with New Zealand-based cybersecurity company Emsisoft.

–with files from Global’s Simon Little

More on Canada

OTHER NEWS

13 minutes ago

Chiefs News: Kansas City to Partner With Hallmark on Original Romance Movie

13 minutes ago

'I Want To Be Ready!' Jets' McDonald Preparing for Breakout

13 minutes ago

All Blacks head coach Scott Robertson explains controversial selection calls

13 minutes ago

Does Commanders 'Aggressive' Offseason Mean They Rank With Texans?

13 minutes ago

Dr Doireann O'Leary on the triggers that cause acne in women way past their teens

13 minutes ago

Jets' Tyron Smith To Have Plenty of Vet Days

13 minutes ago

The New VW Golf R Wagon Is All the Car You Need but Can't Have

13 minutes ago

What to expect from Deion Sanders' Colorado this season

15 minutes ago

21 million Miniverse toy sets recalled after reports of burns and respiratory irritation

19 minutes ago

Pentagon chief speaks with Russian defense minister

19 minutes ago

Boots shoppers praise £5 moisturiser that's recommended by dermatologists and 'saves' skin

19 minutes ago

An offseason checklist for the Edmonton Oilers

19 minutes ago

Julian Assange’s eye-watering bill to fly free

20 minutes ago

Deschamps admits ‘we deserve to be second’ but expects France to click

20 minutes ago

‘Wholly unsuitable’ outdoor dining area removed following shock closure of Wexford pub

20 minutes ago

How do you spot an innovation stock?

20 minutes ago

Maguire lauds Latrell impact on Blues' Origin focus

20 minutes ago

Championship revenue exceeds wages - Deloitte report

20 minutes ago

Heartache for Dutch golfers denied Olympics by their own country: 'We don't think you're worthy'

20 minutes ago

MCG specialist addresses Maroons

20 minutes ago

4,000 missiles, 72-hour outages: Northern Israeli mayor warns of 'blackout scenario'

20 minutes ago

Patriots Reveal Full Training Camp Schedule, Joint Practice With NFC Contender

20 minutes ago

Senator Payman crossing floor a ‘big test’ for PM’s leadership: Sussan Ley

20 minutes ago

Gareth Southgate claims England fans are creating ‘unusual environment’

20 minutes ago

Crowded wildlife rehab center in Plano seeks community help

20 minutes ago

Assange’s eye-watering bill for freedom

20 minutes ago

Nuclear energy is the 'fastest way' to reduce emissions

20 minutes ago

Texans Helping Texans | Houston chef helps others break into the food industry

20 minutes ago

Assistant referee faints in Peru v Canada Copa America clash

20 minutes ago

Economists raise China growth forecasts as exports improve

22 minutes ago

How Origin coaches are feeling on game day

22 minutes ago

That’s a Wrap! The Best of Sydney Whisky Month Revealed

22 minutes ago

Australia miss out when it matters at T20 World Cup as David Warner bids farewell

26 minutes ago

Top of the FLOPS! L'Equipe hand one England star a 3/10 in their brutal ratings after drab 0-0 draw with Slovenia... but which player was deemed 'essential' to Euro 2024 hopes?

26 minutes ago

Cricket's integrity has been TRASHED as India receive helping hand for their T20 World Cup semi-final showdown with England, writes LAWRENCE BOOTH

26 minutes ago

From Centre Court to Euro 2024! Novak Djokovic jets into Munich to cheer on Serbia just hours after the tennis superstar practiced at Wimbledon as he continues recovery from knee surgery

26 minutes ago

Video: Gavin Newsom blasts 'delusional California bashers' as he boasts about 'weird, wild, free-spirited' state that produced Metallica, Kendrick Lamar, blue jeans and Barbie - but there's on big problem with his speech

26 minutes ago

Flood watch issued for parts of Chicago area as strong-to-severe storms possible

29 minutes ago

Tom Selleck and ‘Blue Bloods’ crew to celebrate after filming series finale

29 minutes ago

Australia's Warner bows out of international cricket