Saskatchewan Blue Cross Update on Cybersecurity Incident

July 23, 2021  |  As previously reported, on Tuesday, April 20, Saskatchewan Blue Cross became aware of a cyber security incident affecting the company’s information technology infrastructure. Immediately upon discovery, Saskatchewan Blue Cross took steps to isolate the incident and engaged cybersecurity experts to assist us with our investigation, assessment, and remediation efforts. 

With the assistance of leading third-party experts, we have now determined that an unauthorized third-party illegally accessed our infrastructure on or around April 6, 2021 and accessed personal information belonging to certain individuals. Despite this unauthorized access, due to the immediate steps taken to contain and minimize the risks from the incident, we believe the risk of misuse of any data is low.   

While there is no evidence that any personal or otherwise sensitive information has been misused or distributed as a result of this Incident to date, Saskatchewan Blue Cross is in the process of notifying all potentially affected individuals to ensure they are aware of the incident and steps they can take to protect themselves, and to provide affected individuals with access to a free credit monitoring and identity theft protection service. The investigation is in the final stages and should we identify any other affected individuals, we will notify you without delay. 

The protection and security of our members’ information is a top priority, and there is nothing more important to us than maintaining the trust of Blue Cross members and partners. Saskatchewan Blue Cross employs robust tools and systems to monitor, detect and investigate potential threats, including extensive employee training programs. We are continuing to invest heavily in enhancements to technology and training as new threats and safeguards emerge, including independent third-party vulnerability and penetration testing and security assessments. 

If you are concerned that you may have been affected by this incident, and you have not received a notification letter from us, you can contact us at 1-855-545-1954. The call centre will be open from 8:00 a.m. to 5:30 p.m. Alternatively, you can contact us at privacyofficer@sk.bluecross.ca.