T Bachmier's Site

TRU Open Learning

Print Assignment: Patient Data Released As Hackers Demand Ransom From BC Hospital

In late 2023, disaster struck at a large BC hospital. Charting systems, digital medication cabinets, and all data-storing devices compromised by international cyber criminals. With loads of sensitive information in the hands of criminals, hospital staff and executives scrambled to plan their counterattack and defend their systems. Ultimately, a coding flaw in the software was discovered and exploited by criminals who demanded a ransom payment of $25 million, in addition to other demands. Health information systems across the country are at risk. 

The Initial Attack

In the early morning hours of December 20th, nurses and care aides at Rocky Mountain Health Centre (RMHC) were providing morning care to their patients and had started their documentation and charting when suddenly their computer screens went black. Seconds later, a message in green text appeared on all hospital devices: “You have been hacked. This software has been compromised by Datacon”. Confusion flooded amongst the unit as staff tried to figure out what was happening to their computers. All digital technology had been rendered useless and continued to show the eerie message. 

Staff gathered in the nurses’ station to discuss the incident. Frantic phone calls to hospital leaders and administration continued as the minutes passed by. Unfortunately, this cyber attack was not isolated to one unit; it had consumed the entire hospital. From patient care to financial offices, all computers and devices were frozen.

iPhone screen displaying incoming phone call from hospital administration. Taylor Bachmier, 2024.

Ransom

Communication between hospital leaders and Datacon revealed the list of demands outlined in the ransom attack: 

  • $25 Million sent in untraceable cryptocurrency
  • Reset of all device software to prevent Datacon criminals from being traced
  • No contact with RCMP or Canadian Security Intelligence Service (CSIS) or any external governmental cyber security organizations. 

John Magnolia, CEO of RMHC, commented that the situation “posed a major threat on patients and hospital staff” and encouraged the public to be cautious of potential future data breaches to health information portals and to strengthen their passwords. 

After hours of deliberation amongst hospital leaders and management, RHMC refused the ransom demands and stated their coalition with technology manufacturers and law enforcements were far too strong to surrender to Datacon’s ransom. 

Sensitive Health Information Leaked

Following the refusal of the ransom, Datacon published terabytes of stolen data to social media sites and public webpages. The leaked data included thousands of charts from past and current patients at RMHC. Outlined were patients’ full names and contact information, personal health numbers, diagnoses, lab results, and other critically sensitive health information. Additionally, chart data and all healthcare provider communication (emails, phone calls, messages) were published to the site. 

Similar attacks have become more recent across Canada.

While this private information was now available to anyone with internet access, one individual decided to use her technological abilities to help the hospital build stronger cybersecurity: Michaela C, a nurse working on the surgical floor at the time of the attack. 

Nurse or Superhero?

Registered Nurse Michaela is described by her friends as a “master of all trades” as she holds two degrees: Nursing and Computing Science. Coming from a software engineering and cybertech background, Michaela enhances her workspace and works with non-profit companies to increase their cybersecurity and defend against attacks. The rest of her time is spent caring for surgical patients at RMHC, which she enjoys. 

When approached by hospital leaders, the opportunity to fix the hospital’s cybersecurity was one she could not turn down. Using her intimate knowledge of both healthcare and computer technology, Michaela developed her own program to prevent future attacks against RMHC. 

RMHC has since released a statement in admiration of Michaela’s efforts. The new software program is to be integrated into all hospital technology in early 2024. 

Nurse Michaela J smiling with stethoscope and lanyard around her neck. Taylor Bachmier, 2024.

 

© 2025 T Bachmier's Site

Theme by Anders NorenUp ↑