Cyber Incident Victim: Barrie and Community Family Health Team
Date:
Mar 2024
Location:
Canada
Summary
A cybersecurity incident, potentially ransomware, disrupted operations at a network of medical clinics, affecting multiple facilities and dozens of physicians. The organization engaged external cybersecurity experts and legal counsel, notified law enforcement, and maintained partial service continuity for clinics and patient services while restoring phone systems. Electronic medical records remained unaffected, and there was no confirmed compromise of patient data. Investigations are ongoing with cooperation from local and national authorities, who emphasized general advisories against ransom payments. A separate cyber incident occurred concurrently in another municipality, though no connection was established.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Barrie and Community Family Health Team (BCFHT) experienced a cyber-security incident discovered during the week of March 8, 2024, disrupting operations across multiple medical clinics in Barrie, Ontario. BCFHT Chair Matt Orava confirmed the organization engaged external legal counsel and third-party cybersecurity experts to contain, remediate, and investigate the breach, which was reported to local and national law enforcement agencies. The Barrie Police Service received an online complaint on February 23, 2024, forwarding it to their fraud unit, while the RCMP deferred inquiries to Barrie authorities. Orava emphasized BCFHT’s business and patient services remained largely operational, including walk-in clinics on Prince William Way and Bell Farm Road, though phone systems required restoration efforts expected to conclude within days. The electronic medical records (EMR) system, housed separately, was unaffected. BCFHT stated no evidence indicated patient data compromise but pledged direct notification if sensitive information was impacted.
BCFHT activated incident response, disaster recovery, and business continuity protocols, enabling clinics to maintain services through manual processes like paper-based requisitions and fax machines. The investigation remained ongoing, with updates promised via BCFHT’s website. Barrie Police spokesperson Peter Leon characterized ransomware attacks as increasingly prevalent, advising against ransom payments due to risks of perpetuating criminal activity. A separate cyber incident in Huntsville affecting municipal systems occurred concurrently, though no connection to BCFHT’s breach was confirmed. BCFHT restricted public commentary to preserve investigation integrity, directing all inquiries to Orava while collaborating fully with law enforcement. No threats linked to the breach were disclosed, and restoration timelines for residual disruptions were unspecified beyond phone service repairs.