Information regarding Data Breach

June 18, 2018 - CarePartners, a home care service provider to Ontario’s Local Health Integration Networks (LHINs), has become the victim of a cyber-attack by sophisticated actors.

The cyber-attack breached CarePartners’ computer system, and as a result patient and employee information held in that system, including personal health and financial information, has been inappropriately accessed.

Acting immediately in partnership with Ontario’s LHINs, CarePartners took direct steps to prevent additional exposure and close vulnerabilities. CarePartners retained Herjavec Group, a leading cyber security firm, to contain and determine the extent of the breach. The Ontario Information and Privacy Commissioner and law enforcement officials have also been contacted and engaged.

LHINs and CarePartners have suspended the online referral system’s capacity to receive patient assignments from Ontario’s LHINs until the breach is fully contained and vulnerabilities are fully closed.

CarePartners will be providing ongoing credit monitoring for any individuals whose personal data may have been breached. Information regarding credit monitoring and questions related to personal data can addressed by calling 1.844.337.7300.

Ontario’s LHINs’ and CarePartners’ priority is to provide continuing care to LHIN home care patients and protecting the security of patient information.

FAQs

1)

What is the relationship between CarePartners and the LHINs?

 

CarePartners is an Ontario-based community home care service provider organization contracted by Ontario’s Local Health Integration Networks (LHINs) to provide home care services including personal support and nursing.

2)

How do I, as a patient, know if I am impacted?

 

CarePartners has contacted by mail those employees and patients known by them to have been impacted by the breach.

Concerned patients are encouraged to contact CarePartners by calling 1.844.337.7300 if they have additional questions and wish to register for credit monitoring.

3)

What do I do to protect myself?

 

CarePartners is committed to supporting and protecting impacted patients by providing credit monitoring and identity theft monitoring for a period of one year.

Information regarding credit monitoring and other matters is available by calling 1.844.337.7300.

Patients are encouraged to monitor their accounts and notify CarePartners and their financial institution of any suspicious activity.

4)

What information of mine do they have?

 

It is our understanding from CarePartners that some personal health records and financial information has been illegally accessed.

While some patient credit card information was compromised, it would impact only those people who provided a credit card to CarePartners for services over and above those provided by the LHIN.

CarePartners has contacted by mail those patients and employees known by them to have been impacted by the breach.

5)

Will you pay for the costs for me to update my documentation?

 

CarePartners is committed to supporting and protecting impacted patients by providing credit monitoring for a period of one year.

Information regarding credit monitoring and other matters is available by calling 1.844.337.7300.

6)

I receive services from another home care provider (not CarePartners).

How secure is my patient information?

 

LHINs have independently retained a third-party to undertake a comprehensive review of each of their contracted home-care service provider organizations to ensure patient data systems and facilities exceed industry cyber-security standards.