N.L. health-care workers got an email promising a day off — but it was only a cybersecurity test
N.L. health-care workers got an email promising a day off — but it was only a cybersecurity test
https://www.cbc.ca/news/canada/newfoundland-labrador/nlhs-phishing-email-9.7238374
Publish Date: 2026-06-17 13:36:00
Source Domain: www.cbc.ca
Using an unordered list, summarize the following article with between 4 and 8 key points. Listen to this articleEstimated 5 minutesThe audio version of this article is generated by AI-based technology. Mispronunciations can occur. We are working with our partners to continually review and improve the results.Employees of Newfoundland and Labrador’s health authority recently received an email thanking them for their hard work in recent months with the promise of a day off — only to find out it was all just a cybersecurity test.In an email obtained by CBC News, Newfoundland and Labrador Health Services said in recognition of the work they’d put in during the recent implementation of the new digital health information system CorCare, all employees would receive a paid day off.The email — which was titled “June Holiday” — contained instructions to register for the day off by June 17 by clicking on a link.“Thank you for the care, professionalism, and commitment you continue to bring to N.L. Health Services and to the people and community we serve,” the email concluded.However, it turned out the email was sent as part of an internal cybersecurity test to track employees who clicked on the link.NLHS has apologized for sending out a phishing email that promised health-care workers a paid day off. (NLHS)In an email sent Wednesday, vice president of digital health and interim chief information officer Steve Lockyer apologized for what he called the “cybersecurity awareness email.”“We are taking a step back to review how these exercises are developed and communicated to ensure they reflect the respectful and supportive culture we strive to foster,” he wrote.’Very poor taste,’ says RNU presidentOrganizations that represent health-care workers have been quick to slam the province’s health authority over the move.Registered Nurses’ Union Newfoundland and Labrador president Yvette Coffey said while cybersecurity education is important, nurses are upset over the email at a time when many are stressed over working conditions.Yvette Coffey, president of the nurses’ union, says nurses are upset over the email at a time when many are stressed over working conditions. (Abby Cole/CBC)Speaking with CBC News on Wednesday, Coffey said her members were “exhausted” in the CorCare rollout, constantly troubleshooting and working mandatory overtime. There are cases of denied leave. She said some people opted to quit. “And to only find out that this was a test… It is not in good taste. It is very insensitive and very disrespectful to our members, and someone has to be held accountable for this one,” she said, adding an apology is not enough from her perspective.Jerry Earle, president of the Newfoundland and Labrador Association of Public and Private Employees, told CBC he’s “absolutely disgusted” with what he’s calling “a cruel hoax.”“Our members deserve better than to be taunted with the promise of a day off after the incredible amount of work and sacrifice they made to get CorCare up and running,” he wrote in a statement.Similar to the nurses’ union, he said his members were denied vacation time and worked long hours due to the CorCare launch.Like Coffey, Earle said cybersecurity education awareness is important but said the way in which NLHS went about it was inappropriate. On top of an apology, Earle wants an internal investigation and those responsible for the exercise to be removed from their positions.“If one of our members did something as cruel as this, they would be out of a job today.”’Morale is already fragile:’ NLMACorCare — which is expected to cost $600 million over a decade — was implemented by the health authority on April 25.It was touted by NLHS officials as providing health-care professionals and patients with a single shared digital health record, and supporting safer care for patients, smoother transitions between services and better continuity across hospitals, clinics, continuing care and community care.However, some doctors said a mandatory sign-on to use the system was unfair, and the health authority ultimately ended up backtracking, making it voluntary. The contract was also changed so that community physicians would not have to assume legal and financial liability for privacy breaches.When people saw the email promising a day off, Newfoundland and Labrador Medical Association president Dr. David Metcalfe said they thought they were being recognized for the work with helping implement CorCare’s rollout.“To learn this was a test has left many feeling demoralized at a time when morale is already fragile,” he said in a statement.“This approach also reinforces the perception that their experiences and struggles are not being taken seriously and it erodes trust in the messages they receive related to CorCare.”He’s hoping NLHS will do better going forward.Download our free CBC News app to sign up for push alerts for CBC Newfoundland and Labrador. Sign up for our daily headlines newsletter here. Click here to visit our landing page.
