Saskatchewan’s health minister has dismissed the board that oversees eHealth Saskatchewan, replacing it with two bureaucrats days after a privacy commissioner report eviscerated how the agency dealt with a devastating cyberattack.
The government announced the change in a news release Tuesday, adding that the new board will initiate an independent review of the governance, management and program operations at eHealth. The agency is responsible for electronic health records and IT systems for the province’s health system.
On Friday, Information and Privacy Commissioner Ron Kruzeniski released a 51-page investigation into a massive privacy breach that began in December 2019. A ransomware attack compromised at least 547,145 files containing personal health information, and possibly many more. Kruzeniski said those files could be “floating around the dark web right now for sale to the highest bidder.” He also found eHealth was woefully unprepared for the attack.