Class-action lawsuit filed in B.C. over 2009 Interior Health data breach

Advertisement

Advertise with us

VANCOUVER - British Columbia's Interior Health Authority has been hit with a class-action lawsuit over a data breach in 2009 that allegedly compromised thousands of employees' personal information that ended up being sold on the dark web.

Read this article for free:

or

Already have an account? Log in here »

To continue reading, please subscribe:

Digital Subscription

One year of digital access for only $75*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $5.77 plus GST every four weeks. After 52 weeks, price increases to the regular rate of $19.95 plus GST every four weeks. Offer available to new and qualified returning subscribers only. Cancel any time.

Monthly Digital Subscription

$4.99/week*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $19.95 plus GST every four weeks. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 23/05/2025 (479 days ago), so information in it may no longer be current.

VANCOUVER – British Columbia’s Interior Health Authority has been hit with a class-action lawsuit over a data breach in 2009 that allegedly compromised thousands of employees’ personal information that ended up being sold on the dark web.

The lawsuit filed in B.C. Supreme Court on Thursday says the data breach occurred in December 2009, exposing “highly sensitive” personal information belonging to people who worked for the health authority between 2003 and 2009.

Court documents say the information was accessed by “cybercriminals and other malicious actors,” and the “full extent” of the hack still hasn’t been disclosed by Interior Health in the 16 years since.

A man uses a computer keyboard in Toronto in this Oct. 9, 2023 photo illustration. THE CANADIAN PRESS/Graeme Roy
A man uses a computer keyboard in Toronto in this Oct. 9, 2023 photo illustration. THE CANADIAN PRESS/Graeme Roy

Former employee Rae Fergus, one of the lead plaintiffs, says her personal information has been used since 2022 to fraudulently get a car loan and a credit card, and to open a bank account without her “knowledge or consent.”

Susan Shaw, another proposed representative plaintiff who worked for the health authority, says in the lawsuits that she only found out about the data breach last month by reading a news article, and was allegedly offered two years of free credit monitoring after contacting Interior Health about it.

The lawsuit says police in Port Coquitlam, Surrey, and Vernon since 2017 have discovered documents containing Interior Health employee personal information, leading to the health authority publishing a notice online about the hack in March 2024, the “first public acknowledgment” of the breach.

This report by The Canadian Press was first published May 23, 2025.

Report Error Submit a Tip