Information regarding CarePartners' Data Breach

Update 2

July 24, 2018 - On June 18, 2018, CarePartners, an Ontario-based community health care agency contracted by Ontario’s Local Health Integration Networks (LHINs) to provide home care services including personal support and nursing, publicly reported that it was the victim of a cyber-attack by sophisticated actors. As a result of the cyber-attack, patient and employee information held in CarePartners’ computer system, including personal health and financial information, was inappropriately accessed.

Acting immediately in partnership with Ontario's LHINs, CarePartners took direct steps to prevent additional exposure and close vulnerabilities. CarePartners retained a leading cyber security firm to contain and determine the extent of the breach. Additionally, the LHINs and CarePartners suspended the online referral system’s capacity to receive patient assignments from Ontario’s LHINs. CarePartners also notified the police and an ongoing investigation continues. Finally, the LHINs, with CarePartners, informed and continue to work with Ontario’s Information and Privacy Commissioner. 

In addition to the public notice of the cyber-attack, CarePartners proactively notified those patients whose records are confirmed to have been inappropriately accessed. CarePartners continues to have in place a call centre to address any questions or concerns - toll-free 1.844.337.7300.

On July 17, 2018, CBC News reported that the cyber-criminals had contacted them and provided the CBC with additional personal health and financial information obtained illegally from the June CarePartners attack. CarePartners has been unable to confirm the accuracy of the information that remains in CBC’s possession.

As the extent of the breach and number of patients impacted is unclear, CarePartners encourages past and present patients and employees to monitor their accounts and notify their financial institution of any suspicious activity.

Patient care, including the protection of patient privacy and the security of patient health information, is our primary focus - always. Ontario’s LHINs have independently retained a third-party to undertake a comprehensive review of each of our third-party contractors to ensure that patient data systems and facilities meet industry cyber-security standards.

Protecting Yourself

CarePartners continues to support impacted patients by providing one year of credit monitoring for any individuals whose personal data may have been breached.

Information regarding credit monitoring and questions related to personal data can be addressed by calling toll-free 1.844.337.7300 until September 30, 2018.

After September 30, 2018 please call CarePartners at its head office: toll-free 1-866-288-4788.

In light of the ongoing risk, CarePartners is encouraging all past and present patients and employees to monitor their accounts and notify their financial institution of any suspicious activity.

FAQs

1)

What is the relationship between CarePartners and the LHINs?

 

CarePartners is an Ontario-based community home care service provider organization contracted by Ontario’s Local Health Integration Networks (LHINs) to provide home care services including personal support and nursing.

2)

How do I, as a patient, know if I am impacted?

 

CarePartners has contacted by mail those employees and patients known by them to have been impacted by the breach.

As the extent of the breach and number of patients impacted is unclear, CarePartners encourages past and present patients and employees to monitor their accounts and notify their financial institution of any suspicious activity.

Concerned patients are encouraged to contact CarePartners by calling toll-free 1.844.337.7300 if they have additional questions and wish to register for credit monitoring.

3)

What do I do to protect myself?

 

CarePartners is committed to supporting and protecting impacted patients by providing credit monitoring and identity theft monitoring for a period of one year.

Information regarding credit monitoring and other matters is available by calling toll-free 1.844.337.7300.

Patients are encouraged to monitor their accounts and notify their financial institution of any suspicious activity.

4)

Will you pay for the costs for me to update my documentation?

 

CarePartners is committed to supporting and protecting impacted patients by providing credit monitoring for a period of one year.

Information regarding credit monitoring and other matters is available by calling toll-free 1.844.337.7300.

5)

I receive services from another home care provider (not CarePartners).

How secure is my patient information?

 

LHINs have independently retained a third-party to undertake a comprehensive review of each of their contracted home-care service provider organizations to ensure patient data systems and facilities exceed industry cyber-security standards.

Update 1

June 18, 2018 - CarePartners, a home care service provider to Ontario’s Local Health Integration Networks (LHINs), has become the victim of a cyber-attack by sophisticated actors.

The cyber-attack breached CarePartners’ computer system, and as a result patient and employee information held in that system, including personal health and financial information, has been inappropriately accessed.

Acting immediately in partnership with Ontario’s LHINs, CarePartners took direct steps to prevent additional exposure and close vulnerabilities. CarePartners retained Herjavec Group, a leading cyber security firm, to contain and determine the extent of the breach. The Ontario Information and Privacy Commissioner and law enforcement officials have also been contacted and engaged.

LHINs and CarePartners have suspended the online referral system’s capacity to receive patient assignments from Ontario’s LHINs until the breach is fully contained and vulnerabilities are fully closed.

CarePartners will be providing ongoing credit monitoring for any individuals whose personal data may have been breached. Information regarding credit monitoring and questions related to personal data can addressed by calling toll-free 1.844.337.7300.

Ontario’s LHINs’ and CarePartners’ priority is to provide continuing care to LHIN home care patients and protecting the security of patient information.