Allendale, December 2020
Halton Region is notifying residents of a privacy breach involving personal health information at Allendale Long-Term Care Home (LTCH).
The breach affected electronic health records (EHR) for individuals who resided at Allendale from 2005 to July 2024.
In June 2024, a cybersecurity incident involving third-party software at Allendale LTCH occurred. Halton Region says they were initially assured in July that data was unaffected; however, it was confirmed in September that unauthorized parties accessed personal data, including names, health information, and health card numbers. Further investigation revealed all EHR data from 2005 to July 2024 may have been accessed.
Upon learning of the potential breach in July, Halton Region worked with the vendor to secure systems, enhance protocols, and review procedures. In September, after confirming the breach, they engaged a security expert to assess its scope and monitor for data misuse.
Moving forward, Halton Region says they are enhancing privacy and security measures to protect the information of those in a local LTCH and prevent future incidents.
“We sincerely apologize for any concern or inconvenience this may have caused and recognize the potential impact on you and your family,” says the notice. “Your understanding is greatly appreciated as we work to address this matter.”
If you have any questions or wish to discuss this further, email allendaleinquiries@halton.ca, and a representative will contact you.
You have the right to file a complaint with the Information and Privacy Commissioner (IPC) under Part VI of the Personal Health Information Protection Act, 2004 regarding this breach. You can find more information about how to file a complaint here.
If you have a news tip or story idea, you can now send us a heads up via email at News1013@LocalRadio.ca. If you’d like to get ahold of me personally, shoot me a message at Cameron.Wilkinson@LocalRadio.ca. We’re in the business of content creation, so no idea is a bad idea.
