Natural Health Services LTD (and parent Sunniva Inc an American and Canadian Company) is in hot water after the filing of a class action lawsuit announced by Diamond and Diamond LLP.
This response comes after a breach of the Natural Health Services database as an unknown user accessed records between the dates of Dec. 4, 2018 and Jan. 7, 2019.
Natural Health Services is a pioneer in the cannabis industry helping Canadians gain access to medical cannabis and education to make informed decisions. NHS has multiple locations across Canada and a footprint in Alberta including Calgary, Lethbridge and Edmonton.
NHS Database Breach
The Natural Health Services Breach taking place late 2018, early 2019 compromised multiple files and personal identifiable records and other sensitive outlined below.
- Personal diagnostic results
- Personal health care numbers
- Medical information including medical conditions, allergy history, clinic and doctor notes, referrals, forms and completed questionnaires
- Identifiable information connecting above points
According to the representative plaintiff, the leak of sensitive information such as personal health records can result in impacted ability to travel, a negative impact on insurance rates and potential of exposure to fraudulent actives.
Lack of Community Warning
Customers of Natural Health Services experienced a lag in understanding the scope of the NHS breach as the announcement was publicly delayed until early March.
According to Diamond and Diamond “all individuals that filled out these online forms could be affected by this egregious breach”.