By Canadian Press

London Drugs president doesn’t know why cyber attackers struck

May 9, 2024 | 9:23 AM

RICHMOND, B.C. — The president of London Drugs says he doesn’t know why the company was targeted in a cyber attack that forced it to close its stores for more than week, but hackers with sophisticated methods are “constantly probing for weaknesses” in online systems.

Clint Mahlman says the Richmond, B.C.-based pharmacy and retailer had been preparing for such a situation for years, and they shut down immediately after the cybersecurity breach was discovered on April 28 in order to contain the threat.

Since then, he says London Drugs has been working with cybersecurity experts to “methodically go through every system” and bring them back online in a secure way.

Mahlman says he has no knowledge whether the breach might be connected to Premier David Eby’s announcement late Wednesday that the province had detected “sophisticated cybersecurity incidents” involving government networks.

He also says he wouldn’t share “details of any interactions with the threat actors.”

1000 Ways to Heal

1000 Ways to Heal: Moons

Dec 10, 2024

Question of the Week

Should Mayor Reid Hamer-Jackson apologize or resign after it was found he breached a section of council's code of conduct for allowing false or misleading information to be communicated?

Dec 09, 2024

One Man's Opinion

COLLINS: Donald has it wrong - again

Dec 08, 2024

Mahlman says he’s sorry the company couldn’t release more details in the days after the incident, but they don’t want to give the attackers any leverage.

“The cybersecurity experts deal with these people all the time, and as such, they see certain behaviours from certain threat actors,” he said in an interview on Thursday.

Mahlman said hackers look at media reports about the cyber attacks, assessing whether the company is aware of the extent of the breach and its ability to recover. 

“They use that information to either sustain their attack or leverage in some sort of way against the company.”

London Drugs will not knowingly give hackers that leverage, Mahlman says.

“We apologize to the media and our customers that we couldn’t have given more details that they want, but that’s our commitment to the safety and security of our systems and our customers.”

London Drugs said on Tuesday that all 79 of its stores in B.C., Alberta, Saskatchewan, and Manitoba had reopened.

In the B.C. government incidents, Eby said provincial authorities were working with the Canadian Centre for Cyber Security and other agencies to determine the extent of the problem, but there was currently no evidence that sensitive information had been compromised.

He said the investigation was ongoing and more work needed to be done to determine what information could have been accessed.

— By Brenna Owen in Vancouver

This report by The Canadian Press was first published May 9, 2024.

The Canadian Press