Class Actions

LifeLabs Privacy Class Action —

This proposed privacy breach class action is brought against LifeLabs and associated companies on behalf of up to an estimated 15 million Canadians whose personal information, including highly sensitive health information, was compromised in a cyberattack.

Ontario Action

The action commenced in Ontario is on behalf of a proposed national class, meaning all individuals wherever they reside in Canada are included in the proposed class.

Waddell Phillips PC is working with a team of other law firms in prosecuting this action. An action in B.C. may also continue in that province, if required by the Courts.

Case Overview

Waddell Phillips has joined forces with other law firms across Canada to pursue a proposed class action against LifeLabs and associated companies. The claim alleges that LifeLabs had inadequate cybersecurity, which allowed hackers to penetrate LifeLabs’ computer network, and extract the personal health information and other private information of an estimated 15 million Canadians. The compromised information includes medical lab test results, health card numbers, names, addresses, emails, login information, passwords, and dates of birth. The vast majority of affected individuals are in Ontario and B.C., but individuals in the other provinces and territories have been affected as well.

LifeLabs is one of the largest medical testing companies in the world, providing diagnostic medical testing services, including specimen collection, laboratory testing, and reporting of results to patients and health practitioners across Canada. Each year, LifeLabs performs over 112 million laboratory tests on Canadians.

Some time prior to November 1, 2019, LifeLabs suffered a cyberattack in which hackers penetrated LifeLabs’ computer network, and extracted the personal health information and other private information of its patients. An estimated 10 million Ontarians and 5 million B.C. residents may have been affected. After gaining access to LifeLabs’ computer network, the hackers demanded, and LifeLabs paid, an undisclosed amount of money as ransom in an attempt to secure the data. It was not until almost two months later, on December 17, 2019, that LifeLabs made a public announcement regarding the cyberattack and the resulting privacy breach. The Privacy Commissioners in Ontario and B.C. are conducting a detailed investigation of the breach. To date, they have been highly critical of the cyber-security LifeLabs had in place at the time of the breach.


The Proposed Class Proceeding

The proposed class action alleges that the defendants are liable for breach of privacy, breach of contract and negligence, and other wrongs.

Several competing proposed class actions had been commenced, but the plaintiffs have agreed to proceed with one lead national action, to be prosecuted in Ontario.

The Court will decide if the class action can proceed at a certification hearing to be held on December 16, 17, 2021. Until then, the parties are collecting evidence and producing the materials they will rely upon at the certification motion.

There is no cost to you to participate in this proposed class actions. The lawyers are working on a contingency fee arrangement, and will only be paid from the proceeds of the litigation, if successful.


Contact us

If you attended at a LifeLabs facility for medical testing over the past several years, and your personal information was compromised in the recent cyberattack, you may be eligible for compensation. If you are interested in identifying yourself as a potential member of this class action or receiving more information about it, please contact us using the contact form below, or our Vancouver-based partners Hunter Litigation Chambers here or here.

If you believe that you have been adversely affected by this privacy breach, including if your personal information has been compromised, we would like to hear from you about your experiences.

Your information will be kept strictly confidential and will be used only to communicate with you regarding this action and to assist with the prosecution of the action.

Case Overview

Waddell Phillips has joined forces with other law firms across Canada to pursue a proposed class action against LifeLabs and associated companies. The claim alleges that LifeLabs had inadequate cybersecurity, which allowed hackers to penetrate LifeLabs’ computer network, and extract the personal health information and other private information of an estimated 15 million Canadians. The compromised information includes medical lab test results, health card numbers, names, addresses, emails, login information, passwords, and dates of birth. The vast majority of affected individuals are in Ontario and B.C., but individuals in the other provinces and territories have been affected as well.

LifeLabs is one of the largest medical testing companies in the world, providing diagnostic medical testing services, including specimen collection, laboratory testing, and reporting of results to patients and health practitioners across Canada. Each year, LifeLabs performs over 112 million laboratory tests on Canadians.

Some time prior to November 1, 2019, LifeLabs suffered a cyberattack in which hackers penetrated LifeLabs’ computer network, and extracted the personal health information and other private information of its patients. An estimated 10 million Ontarians and 5 million B.C. residents may have been affected. After gaining access to LifeLabs’ computer network, the hackers demanded, and LifeLabs paid, an undisclosed amount of money as ransom in an attempt to secure the data. It was not until almost two months later, on December 17, 2019, that LifeLabs made a public announcement regarding the cyberattack and the resulting privacy breach. The Privacy Commissioners in Ontario and B.C. are conducting a detailed investigation of the breach. To date, they have been highly critical of the cyber-security LifeLabs had in place at the time of the breach.


The Proposed Class Proceeding

The proposed class action alleges that the defendants are liable for breach of privacy, breach of contract and negligence, and other wrongs.

Several competing proposed class actions had been commenced, but the plaintiffs have agreed to proceed with one lead national action, to be prosecuted in Ontario.

The Court will decide if the class action can proceed at a certification hearing to be held on December 16, 17, 2021. Until then, the parties are collecting evidence and producing the materials they will rely upon at the certification motion.

There is no cost to you to participate in this proposed class actions. The lawyers are working on a contingency fee arrangement, and will only be paid from the proceeds of the litigation, if successful.


Contact us

If you attended at a LifeLabs facility for medical testing over the past several years, and your personal information was compromised in the recent cyberattack, you may be eligible for compensation. If you are interested in identifying yourself as a potential member of this class action or receiving more information about it, please contact us using the contact form below, or our Vancouver-based partners Hunter Litigation Chambers here or here.

If you believe that you have been adversely affected by this privacy breach, including if your personal information has been compromised, we would like to hear from you about your experiences.

Your information will be kept strictly confidential and will be used only to communicate with you regarding this action and to assist with the prosecution of the action.

The action that was granted carriage to pursue a national class action is the Carter action.

There were also actions started in B.C. It is likely that some or all of these actions will be stayed, either formally or informally, pending the results in the Carter action.

We are aware that LifeLabs sent email notices, like the one below, to individuals whose “my results” (online test results) account was breached in the cyber attack. If you have received such a notice, please contact us using the form in the “Ask a Question” tab.

We are also aware that LifeLabs sent email notices to customers whose online appointment booking accounts were breached in the cyberattack. For more information about this notice, please contact LifeLabs directly, as indicated.

Additional updates will be posted as the class action progresses.

We review every inquiry we receive and will respond promptly to case specific inquiries.

Contact us below and we’ll respond shortly.

Contact Us