A significant class action settlement has been reached regarding a 2019 data breach that affected millions of LifeLabs customers across Canada. With the deadline for submitting claims fast approaching, it’s important to understand the steps involved in securing compensation for the personal information exposed during the breach. Here, we will break down the details of the LifeLabs settlement, how to submit your claim, and what you need to know about the compensation process.
Understanding the LifeLabs Data Breach
In December 2019, LifeLabs, a medical testing service provider in Ontario, British Columbia, and Saskatchewan, fell victim to a major cyberattack. The breach compromised the personal data of approximately 8.6 million Canadians, which included sensitive information such as:
- Health card numbers
- Names
- Email addresses
- Login details
- Passwords
- Dates of birth
- Medical test results
The breach prompted a class action lawsuit, which accused LifeLabs of being negligent in its handling of personal information. Despite LifeLabs paying a ransom to the cybercriminals, the stolen data was not found on the dark web or otherwise misused. However, the breach exposed serious vulnerabilities in the company’s cybersecurity measures.
Who Is Eligible for Compensation?
The LifeLabs class action settlement is available to any living Canadian residents who meet the following criteria:
- LifeLabs Customers: Individuals who used LifeLabs services on or before December 17, 2019.
- Residency: Applicants must have been residents of Canada as of October 25, 2023.
- Compromised Data: The claimant’s personal information must have been compromised as part of the 2019 data breach.
However, there are specific exclusions for eligibility:
- LifeLabs Employees: Officers, directors, or executive-level employees of LifeLabs are not eligible for compensation under this settlement.
Compensation Details: How Much Will You Receive?
The total settlement amount is $9.8 million, and eligible claimants will receive compensation based on the details of the data breach and the type of information that was exposed. LifeLabs has estimated that the payment for individuals who submit a claim will range between $50 to $150.
It’s important to note that if you choose to receive payment via cheque, a $2 processing fee will be deducted from your compensation. E-transfer payments, on the other hand, are expedited and will not incur additional fees.
The Claims Process: How to Submit Your Claim
If you are an eligible class member, you must submit a claim by April 6, 2024, to be considered for compensation. There are three primary ways to submit your claim:
1. Online Submission
- Visit the Official Class-Action Website: You can complete and submit the claim form directly on the official class-action settlement website.
- Required Information: You will need to provide your personal details, including:
- Name
- Address
- Telephone number
- Valid provincial health card number
- Choose Your Payment Method: You will also need to select your preferred payment method—either e-transfer or cheque.
2. Email Submission
- Email Your Claim Form: Completed claim forms can be emailed to the address lifelabssettlement@kpmg.ca.
- Preferred Method: Email submissions are recommended as they are processed faster.
3. Mail Submission
- Mail the Claim Form: You can also mail your completed form to:
- KPMG Inc.
- LifeLabs Claims Administrator
- 600 Boul. de Maisonneuve West, Suite 1500
- Montréal, Qué., H3A 0A3
Note: Submitting online or via email is preferred for faster processing.
What Happens After Submission?
Once you’ve submitted your claim, LifeLabs will begin processing the applications. Depending on the volume of claims, payments may take some time to process. Keep in mind that e-transfers will be expedited compared to cheque payments. If there are any issues or questions regarding your submission, you will be contacted by the claims administrator.
Legal Actions and LifeLabs’ Response
The class action lawsuit emerged after a joint investigation by the privacy commissioners of Ontario and British Columbia, who determined that LifeLabs had failed to adequately protect the personal health information of millions of Canadians. As a result, LifeLabs was ordered to improve its cybersecurity measures and cease collecting certain pieces of sensitive data. The company has since implemented changes to prevent future breaches, but this settlement aims to provide compensation to those affected by the 2019 breach.
What You Need to Know About Privacy and Security
While the settlement offers compensation, it’s crucial for all Canadians to remain vigilant when it comes to protecting their personal data. Here are a few steps you can take to enhance your cybersecurity:
- Monitor Your Accounts: Regularly check your bank accounts, credit reports, and health records for signs of unauthorized activity.
- Enable Two-Factor Authentication (2FA): Protect your online accounts with 2FA wherever possible to add an extra layer of security.
- Change Passwords Regularly: Make sure your passwords are strong and unique for each account, and update them regularly.
Conclusion
If you were affected by the 2019 LifeLabs data breach, it’s essential to act before the April 6, 2024 deadline to submit your claim. Whether you choose to file online, via email, or through traditional mail, the compensation process is straightforward, and the amount you receive can help mitigate the impact of this data breach.
Take the necessary steps now to ensure that you are properly compensated for the breach, and continue to protect your personal information moving forward.