Possible cyberattack could impact N.L. health care for weeks, months: experts

Cybersecurity experts say disruptions in Newfoundland and Labrador health-care services caused by what the government says is a possible cyberattack could potentially last for weeks or even months.

In an interview with CBC News, cybersecurity journalist Sam Harper said it's difficult to determine the extent of the damage at this stage, and there is "no quick fix" to get the system back up and running.

"I don't think I can give you a number in terms of weeks or months," he said. "Having to rebuild systems ... takes a lot of time."

The disruption, which began on Saturday morning, has caused thousands of appointments and procedures to be cancelled. All four of the province's regional health authorities have been impacted by the outage, although Eastern Health appears to have been affected most severely.

In a media briefing on Monday, Health Minister John Haggie and Eastern Health CEO David Diamond said they didn't yet know the cause of the outage or how long it would be before the system is back up and running.

Sources have told CBC News the outage is due to a ransomware attack, a type of cybersecurity breach where an attacker will make a system inaccessible until they are paid a ransom.

Haggie said the system outage is affecting both the "brain" of the system and its backup — a situation Harper says is a problem.

"Saying it's bad is an understatement," Harper said. "If you want to be able to restore your infrastructure, you actually need to have backups that you know are safe and that ... have the correct information."

Harper said health-care systems in the United States and Ireland have experienced similar attacks recently. Nunavut experienced a ransomware attack on government systems in 2019, though the Nunavut government says it didn't pay the ransom, but instead isolated infected portions of its network.

Harper said most organizations and governments who do pay the ransom risk getting back damaged information, or not getting the information at all. 

Steve Waterhouse, a cybersecurity expert who has worked with the Department of National Defence, said ransomware attackers often target health-care systems because of the urgent nature of many appointments and procedures.

Waterhouse said he doesn't advise organizations to pay the ransom — except as a last resort.

"It's going to be a gamble," he said.

Waterhouse said organizations and governments need to make cybersecurity a top priority.