• Ransomware Update

    ​eHealth recently discovered that files from some of its servers had been sent to a number of suspicious IP address.  This came to light as part of normal and ongoing forensic analysis, started in the wake of the January 5th 2020 ransomware attack.

    That analysis continues. 

    The files exchanged were encrypted and password protected by the attacker, making it difficult to determine the exact content of those files.  Officials with the Ministry of Health and Saskatchewan's Information and Privacy Commissioner have been informed.

    What we're doing:

    • All files have been restored through back-ups;
    • eHealth will continue its security analysis to determine if any further breaches have occurred;
    • eHealth has retained a specialized security firm tasked with scouring the internet for any signs that confidential information has been compromised;
    • Should it be determined that personal health information has left the organization, the public will be advised.

    Until this discovery, eHealth had no evidence that any information had left its control during the ransomware event. Our on-going forensic and restoration efforts brought this new information to light.

    We apologize for any concern this has caused to our customers and the people of Saskatchewan.

    eHealth will continue to provide updates, should new information be discovered.

    Posted 2020-02-07 08:46:11


​​​eHealth Saskatchewan
2130 11th Avenue
Regina SK  S4P 0J5
Phone:1-855-eHS-LINK (1-855-347-5465)