Canadian London Drugs Refused to Pay $25M Ransom

November 23, 2024

INCIDENT

The ransomware attack on London Drugs paralyzed operations across 79 stores in Western Canada for over a week, and further disrupted services in the other Canadian provinces. On May 7 all stores had fully reopened. London Drugs improvised so about half of its chain could provide pharmacy services to ensure existing prescriptions wouldn’t be interrupted.

The breach resulted in the theft of sensitive corporate files, including extensive employee records like immigration applications, termination letters, and personal data such as financial information and medical records.

Incident Date

April 28, 2024

Location

Canada

Estimated Cost

<80 stores closed for a week; $25M ransom refused

Victims

Type of Malware

No Malware identified

Threat Source