Incident

Canadian pharmacy London Drugs shuts down services due to cyberattack


Learn More

London Drugs, a major Canadian pharmacy chain, has temporarily closed its operations across nearly 80 stores in Western Canada due to a cyberattack that occurred on April 28th, 2024.

The company confirmed the incident as a cybersecurity breach affecting its operational capabilities and needing immediate shutdown of services to mitigate risks.

Customers are advised to contact their local London Drugs pharmacy directly for urgent needs as pharmacists remain available to assist despite the closures.

The extent of the data compromise, including personal information of patients, customers, and employees, is still under investigation, and the company has not specified a timeline for resuming full operations.

No details are disclosed about the nature of the attack, but the aggressive shutdown indicates ransomware.

Update - As of 18th of May 2024, London Drugs confirmed that some corporate files containing workers' personal information were compromised in the breach. They have declined to provide specifics on the nature or extent of exposed personal information.
As a precautionary measure, the company has offered all of its employees 24 months of credit monitoring and identity theft protection services.

As of 21st of May 2024, LockBit ransomware gang claimed responsibility for the breach.

As of 23rd of May 2024, LockBit posted the stolen data on the dark web, after a ransom deadline had passed. Files appear to contain financial and personal information about the company’s employees such as sexual harassment complaints, immigration applications, relationship disclosures and termination letters.

Canadian pharmacy London Drugs shuts down services due to cyberattack