Vaccine passports: How experts say B.C. can learn from Quebec's mistakes
Mere hours after Quebec’s vaccine passport system launched on the government website, hackers were able to get the QR codes belonging to several politicians, including Premier Francois Legault.
Cybersecurity experts tell CTV News the hackers likely downloaded the QR codes from the government website using dates of birth, health insurance numbers and first vaccination dates. Now, they’re warning that B.C. needs to be vigilant for data breaches as it prepares to launch its own vaccine passports.
“It’s very easy for hackers to go online and find publicly available information on high profile government officials. Their name, vaccine status, their date of birth, these are very easy things to find. Unfortunately, the Quebec government did not put additional security layers on its website to ensure that only people downloading their own QR codes, are in fact doing so,” said Carmi Levy, a technology analyst based in London, Ontario.
While it may seem like a minor privacy breach, Levy said it could potentially open the path to identity theft.
“Here’s the thing about identity theft, you get one piece of information in one place, a couple more pieces of information elsewhere, if you’re a hacker, you can assemble a dose of data on your victim from multiple sources, and then you can go to town,” said Levy.
B.C.’s vaccine card is set to roll out Sept. 13 and users will need at least one dose of a COVID-19 vaccine to be permitted entry into events such as concerts, sports games and businesses like pubs, restaurants and fitness classes. By Oct. 24, users are will need to be fully vaccinated and with at least seven days having passed since receiving their second dose.
Cybersecurity experts hope the government of B.C. is watching what is happening in Quebec and learn from that province’s mistakes.
“We need to sit down and not rush through this. We need to think of all the potential threats and go through a threat modelling exercise to identity how could this data and these QR codes be misused?” said Dominic Vogel, chief strategist at Cyber.sc.
In a statement to CTV News, B.C.’s Ministry of Health said “Protecting British Columbians’ data and networks is a top priority for this government, especially where it concerns personal information. Security threat and risk assessments, as well as privacy impact assessments play an important role in privacy protection by helping government identify and mitigate risks.”
It also said that the Office of the Chief Information Officer is constantly evaluating potential threats and has systems monitoring 24 hours a day, seven days a week.
“We are working to make the BC Vaccine Card process as easy as possible for people, while ensuring it is secure protecting people’s privacy. More details will be provided to the public in the coming days,” continued the ministry’s statement.
However B.C. decides to roll out its vaccine passport, Levy believes there will likely be glitches in the process. What matters is that we learn from those glitches and apply that information going forward.
“We should also treat QR codes like we treat our signatures, our passwords and our usernames. We should not be sharing them or taking pictures on social media. We shouldn’t be telling people where we got vaccinated and what we got vaccinated with. All of this information in the hands of a hacker, could potentially be used against us,” added Levy.
CTVNews.ca Top Stories
Most of Canada to receive emergency alert test today
The federal government will test its capacity to issue emergency alerts today, with the exception of Ontario, where the test will take place on May 15.
'A huge difference': These adults born in the '90s partnered with their parents to buy homes in Ontario
An Ontario woman said it would have been impossible to buy a house without her mother – an anecdote that animates the fact that over 17 per cent of Canadian homeowners born in the ‘90s own their property with their parents, according to a new report.
OPINION No reunion between Prince Harry and the King signifies a setback for royal unity
Prince Harry, the Duke of Sussex, has made headlines with his recent arrival in the U.K., this time to celebrate all things Invictus. But upon the prince landing in the U.K., we have already had confirmation that King Charles III won't have time to see his youngest son during his brief visit.
Northern Ont. woman makes 'eggstraordinary' find
A chicken farmer near Mattawa made an 'eggstraordinary' find Friday morning when she discovered one of her hens laid an egg close to three times the size of an average large chicken egg.
How Drake and Kendrick Lamar's rap beef escalated within weeks
A long-simmering feud between hip-hop superstars Drake and Kendrick Lamar reached a boiling point in recent days as the pair traded increasingly personal insults on a succession of diss tracks. Here’s a quick overview of what’s behind the ongoing beef.
NEW For their protection, immigrants critical of China and India call for speedy passage of Canada's foreign interference legislation
Canadian immigrants threatened by hostile regimes are urging parliamentarians to quickly pass the 'Countering Foreign Interference Act' so they can feel safe living in their adopted home.
Ontario man devastated to learn $150,000 line of credit isn't insured after wife dies
An Ontario man found out that a line of credit he thought was insured actually isn't after his wife of 50 years died.
Spanish prosecutors recommend 2nd investigation into Shakira's taxes be thrown out
Spanish state prosecutors recommended Wednesday that an investigating judge shelve a probe into another alleged case of tax fraud by pop star Shakira.
Stormy Daniels describes meeting Trump during occasionally graphic testimony in hush money trial
With Donald Trump sitting just feet away, Stormy Daniels testified Tuesday at the former president's hush money trial about a sexual encounter the porn actor says they had in 2006 that resulted in her being paid to keep silent during the presidential race 10 years later.