The Natural Health Services Canada exposed personal information of medical marijuana patients in a breach. This NHS data breach reportedly affected as much as 34,000 patients.
NHS Data Breach Affecting Marijuana Patients
The news surfaced online after the Canadian Press reported the matter. As disclosed, the medical database of Canadian NHS located at Windsor faced a security breach. The system was also used by its parent company Sunniva Inc.
Reportedly, the incident happened between December 4, 2018, and January 7, 2019. The breached data allegedly includes personal health information of about 34,000 patients. NHS explained that they have informed the affected patients about the incident in the previous week.
Explicit Personal Data Exposed
As reported, the Canadian Natural Health Services confirmed that the breach did not affect the patient’s financial or credit card details. Nor did it exposed social insurance numbers of patients as they do not collect this data.
Nonetheless, according to Jeremy Diamond, Manager Partner at Diamond and Diamond Lawyers, the breach exposed explicit personal and health data. This data also includes the patient’s diagnostic results, contact details, and health-care numbers. Diamond suspects that the breach affected everyone who filled the online forms.
“All individuals that filled out these online forms could be affected by this egregious breach.”
Diamond and Diamond has also announced a class-action lawsuit against Sunniva Inc. and NHS.
The victim service has confirmed that they are closely collaborating with law enforcement authorities and privacy protection services for investigations. They also pledge to take necessary security measures to avoid such incidents in future.