Canadian healthcare workers were duped by a sophisticated phishing email that promised a paid day off, resulting in thousands of dollars in fraudulent payments, according to a report from the Ontario Ministry of Health.
How the Scam Worked
The email appeared to be from the hospital's human resources department, offering staff an extra paid day off as a reward for their hard work during the pandemic. Recipients were instructed to click a link to confirm their attendance and provide personal details, including banking information for direct deposit of the bonus.
More than 200 employees at several hospitals in Ontario fell for the scam, with losses estimated at $500,000. The fraudulent payments were processed before the scam was detected.
Impact on Healthcare System
The incident has raised concerns about cybersecurity in the healthcare sector, which has been under strain during the pandemic. “This is a wake-up call for all healthcare institutions to strengthen their cybersecurity protocols,” said Dr. Emily Carter, a cybersecurity expert at the University of Toronto.
Hospitals are now reviewing their security measures and have launched internal investigations. Staff are being retrained to recognize phishing attempts.
