British Columbia’s Interior Health Authority faced a class-action lawsuit due to a 2009 data breach that compromised thousands of employees' personal information, which was later sold on the dark web. The breach exposed highly sensitive information belonging to employees who worked for the health authority between 2003 and 2009. The full extent of the hack is still unknown. Former employees have reported their personal information being used for fraudulent activities, including obtaining car loans and credit cards without their consent.
Source: https://globalnews.ca/news/11194372/interior-health-data-breach-2009/
TPRM report: https://scoringcyber.rankiteo.com/company/interior-health-authority
"id": "int325052525",
"linkid": "interior-health-authority",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'British Columbia',
'name': 'Interior Health Authority',
'type': 'Health Organization'}],
'attack_vector': 'Unspecified cyberattack',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal information'},
'date_detected': 'December 2009',
'date_publicly_disclosed': 'March 2024',
'description': 'A data breach in 2009 compromised thousands of employees’ '
'personal information, which ended up being sold on the dark '
'web.',
'impact': {'data_compromised': 'Personal information of employees',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class-action lawsuit'},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
'investigation_status': 'Ongoing',
'motivation': 'Data exfiltration and sale on the dark web',
'references': [{'date_accessed': 'May 23, 2025', 'source': 'Global News'}],
'regulatory_compliance': {'legal_actions': 'Class-action lawsuit filed in '
'B.C. Supreme Court'},
'response': {'communication_strategy': 'Online notice published in March 2024',
'recovery_measures': 'Two years of free credit monitoring '
'offered to affected employees'},
'threat_actor': ['cybercriminals', 'other malicious actors'],
'title': 'British Columbia’s Interior Health Authority Data Breach',
'type': 'Data Breach'}