B.C. PharmaNet hit by hacker, 1,600 accounts breached

About 1,600 patients had their private data in the provincial PharmaNet ​prescription system accessed by an unknown hacker, a Health Ministry investigation has revealed.

Ministry officials say the unauthorized person used a doctor's account to access the prescription medication database between March 9 and June 19.. The doctor was unaware of the breach.

The privacy breach included the names, birth dates, addresses, telephone numbers and health numbers of 1,600 people. About 34 people also had their personal medical history accessed.

The ministry says all those affected will be notified by mail of the breach and will be offered free services to help prevent identity theft and bank fraud.

"While this privacy breach did not include banking information, enough information was accessed to be used for identity theft," said a statement released by the ministry.

"The ministry encourages affected people keep a close eye on their bank accounts, credit cards, and online identity and services.

"Those affected can contact their local pharmacy to put a keyword on their PharmaNet profile. They can also request, through Health Insurance BC, a Medical Services Plan alert, which prompts health professionals to ask for a second piece of identification when a person uses his or her personal health number (BC Services Card or Care Card number)."

The hacker did not use the system to create fake medical prescriptions, say officials.

A history of breaches

It is not the first major privacy breach affecting B.C. residents' data.

In 2013, the government announced that the personal health data of millions of British Columbians was accessed without proper authorization as part of university research.

In the same year, the personal information of about 16,000 patients of a medical lab in Kamloops went missing when a computer was sent for servicing.

In 2012, an investigation concluded the University of Victoria had failed to protect the private records of thousands of employees stored on a stolen computer memory card.

In 2011, B.C.'s Information and Privacy Commissioner launched an investigation into two incidents involving government medical records that were lost in one case, and found dumped in the trash in the other.

In 2010, a breach that compromised users' account details forced the shutdown of the B.C. Lottery Corporation's new online casino PlayNow.com just hours after it was launched.

In 2009, the RCMP found files on 1,400 social assistance clients in the home of a government worker, but it took the government seven months to notify those whose confidential files were involved.

In 2006, NDP opposition revealed that a hacker in the Netherlands broke into the provincial government's computer network.

In 2006 computer tapes containing health and immigration records for thousands of people in British Columbia were sold at a public auction for $101.