LifeLabs Privacy Class Action 

This privacy breach class action is brought against LifeLabs and associated companies on behalf of an estimated 8.6 million Canadians whose personal information, including 131,957 individuals whose lab requisitions or results, were compromised in a cyberattack.

Rosenberg Law is working with a team of other law firms across Canada in prosecuting this action.

Case Overview

LifeLabs is one of the largest medical testing companies in Canada, providing diagnostic medical testing services, including specimen collection, laboratory testing, and reporting of results to patients and health practitioners across the country. As such, LifeLabs is the custodian of a trove of highly sensitive health information about millions of Canadians. Each year, LifeLabs performs over 112 million laboratory tests on Canadians.

Around October 31, 2019, LifeLabs discovered that cyberattacks had penetrated its computer network, and had access to its system for nearly a year. During this time, the hackers extracted the personal health information and other private information of LifeLabs’ patients. An estimated 7 million Ontarians and 1.25 million B.C. residents may have been affected. After gaining access to LifeLabs’ computer network, the hackers demanded, and LifeLabs paid, an undisclosed amount of money as a ransom in an attempt to secure the data.

After securing the breach, on December 17, 2019, LifeLabs made a public announcement regarding the cyberattack and the resulting privacy breach. The Privacy Commissioners in Ontario and B.C. conducted a detailed joint investigation of the breach, in which they were highly critical of the cyber-security LifeLabs had in place at the time of the breach.  LifeLabs has opposed the release of these Privacy Commissioners’ full reports.

Rosenberg Law has joined forces with other law firms in Ontario and BC to pursue a proposed class action against LifeLabs and associated companies in respect of the privacy breaches that LifeLabs’ customers suffered. The claim alleges that LifeLabs had inadequate cybersecurity, which allowed hackers to penetrate LifeLabs’ computer network, and extract the personal health information and other private information of an estimated 8.6 million Canadians. The compromised information includes medical lab test results, health card numbers, dates of birth, and other sensitive information. The vast majority of affected individuals are in Ontario and B.C., but individuals in other provinces and territories have been affected as well.

Update

This action was certified as a class proceeding on consent for the purposes of facilitating a settlement concluded between the parties.  The Court approved the settlement at a hearing on October 25, 2023.   The Settlement Agreement and the approving Court orders can be viewed under the heading “Documents” below.

Under the terms of the Settlement, LifeLabs shall pay a guaranteed amount of $4.9M, and up to a further $4.9M, depending upon the number of Class members who make valid claims for compensation.

If you are a member of the Class, you will receive email communication from the claims administrator, KPMG, inviting you to fill out a form which advances your claim for compensation.  We highly encourage you to do so.

The amount of compensation that each individual Class member may receive will be dependent upon the number of valid claims made.

Class Counsel’s legal fees and disbursements as approved by the Court will be deducted from the settlement fund before the balance is disbursed to Class member claimants. The Court approved payment of fees equal to 25% of the settlement fund, plus disbursements and taxes.

2023.11.01 Settlement Approval and Distribution Notice

2023.10-31 Order (Settlement Approval) of Justice Perell

Other Documents

2023.07.05 Settlement-Agreement

2023.08.04-Notice-of-Certification-Settlement