eHealth admits information leaked in ransomware attack

It appears some information from eHealth may have been compromised in last month’s ransomware attack after all.

The organization had been saying that there wasn’t any evidence the attack on Jan. 5 had compromised any of its information.

“We know that no information has found its way out of our organization but we’ve begun shutting down some of our servers and repairing and restoring them,” eHealth CEO Jim Hornell said on Jan. 6.

However, on Friday morning, eHealth announced it had discovered that files from some of its servers had been sent to a number of suspicious IP addresses.

It was discovered as part of the analysis of the system that has been happening since the attack took place.

eHealth said it has hired a security firm to scour the Internet and find any signs that confidential information was compromised or released.

If eHealth finds out that any personal health information was compromised, it said it will let the public know.

The organization also said all of its files have now been restored and it will continue its security analysis to figure out if any other breaches have happened.

Saskatchewan’s Information and Privacy Commissioner is investigating the breach.