A Milton long-term care facility has been the victim of a significant data breach.
In a notice issued Monday (Dec. 23), Halton Region confirmed that the breach exposed personal health information of people who resided at Allendale long-term care home between 2005 and July 2024.
The breach stems from a cybersecurity incident in June involving third-party software used by Allendale. While no data compromise was initially reported, the Region confirmed in September that unauthorized parties accessed personal data — including names, health information and health card numbers.
Further investigation revealed that the breach may have affected all electronic health records (EHR) data for residents dating back to 2005.
The Region is working closely with the vendor to secure the affected systems, strengthen security protocols and review internal procedures. A security expert has been engaged to assess the full scope of the incident and monitor for potential misuse of the data.
The Region expressed regret for any distress caused to residents and their families.
“We sincerely apologize for any concern or inconvenience this may have caused and recognize the potential impact on you and your family,” the online statement reads.
Individuals affected by the breach are encouraged to reach out for further information at [email protected]. They also have the right to file a complaint with the Information and Privacy Commissioner, with further details available at ipc.on.ca.