Skip to main page content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Access keys NCBI Homepage MyNCBI Homepage Main Content Main Navigation
. 2023 Nov 20;195(45):E1548-E1554.
doi: 10.1503/cmaj.230436.

Cyberattacks on Canadian health information systems

Affiliations

Cyberattacks on Canadian health information systems

Vinyas Harish et al. CMAJ. .

Erratum in

No abstract available

PubMed Disclaimer

Conflict of interest statement

Competing interests: Alun Ackery is provincial medical director with CritiCall Ontario. No other competing interests were declared.

Figures

Figure 1:
Figure 1:
Recent cyberattacks on Canadian health information systems, including denial of service (red), ransomware (green), data breach (blue), mixed (orange) and unknown (purple). Note: IT = information technology, PHI = personal health information.
Figure 2:
Figure 2:
Four stages of cyber resilience, with suggested actions. Note: CMPA = Canadian Medical Protective Association, EMR = electronic medical record, VPN = virtual private network.
Figure 3:
Figure 3:
Anatomy of a hypothetical phishing attack.

References

    1. How Canada Compares: Results from the Commonwealth Fund’s 2019 international Health Policy Survey of Primary Care Physicians. Ottawa: Canadian Institute for Health Information; 2020:1–78. Available: https://www.cihi.ca/sites/default/files/document/cmwf-2019-accessible-re... (accessed 2023 Oct. 29).
    1. Cohen AB, Dorsey ER, Mathews SC, et al. . A digital health industry cohort across the health continuum. NPJ Digit Med 2020;3:68. - PMC - PubMed
    1. HC3 intelligence briefing update dark web PHI marketplace: overall classification is unclassified. Washington (DC): The U.S. Department of Health & Human Services; 2019:1–13. Available: https://content.govdelivery.com/attachments/USDHSFACIR/2019/04/25/file_a... (accessed 2023 Oct. 29).
    1. The state of ransomware in healthcare 2021. Abingdon (UK): SOPHOS; 2021:1–16. Available: https://assets.sophos.com/X24WTUEQ/at/s49k3zrbsj8x9hwbm9nkhzxh/sophos-st... (accessed 2023 Oct. 29).
    1. The impact of ransomware on healthcare during COVID-19 and beyond. Traverse City (MI): Ponemon Institute; 2021. Available: https://www.censinet.com/wp-content/uploads/2021/09/Ponemon-Research-Rep... (accessed 2023 Oct. 29). Login required to access content.