Notice of Privacy Breach

This notice pertains to a privacy breach involving personal health information at Allendale Long-Term Care Home (LTCH). The breach affected electronic health records (EHR) for individuals who resided at Allendale from 2005 to July 2024.

What Happened

In June 2024, a cybersecurity incident involving third-party software at Allendale LTCH occurred. Initially assured in July 2024 that data was unaffected, we confirmed in September that unauthorized parties accessed personal data, including names, health information, and health card numbers. Further investigation revealed all EHR data from 2005 to July 2024 may have been accessed.

Our Response

Upon learning of the potential breach in July 2024, Halton Region worked with the vendor to secure systems, enhance protocols, and review procedures. In September 2024, after confirming the breach, we engaged a security expert to assess its scope and monitor for data misuse.

Our Commitment

We are enhancing privacy and security measures to protect your information and prevent future incidents. We sincerely apologize for any concern or inconvenience this may have caused and recognize the potential impact on you and your family. Your understanding is greatly appreciated as we work to address this matter.

If you have any questions or wish to discuss this further, please email allendaleinquiries@halton.ca, and a representative will contact you.

Your Rights

You have the right to file a complaint with the Information and Privacy Commissioner (IPC) under Part VI of the Personal Health Information Protection Act, 2004 regarding this breach. You can find more information about how to file a complaint at www.ipc.on.ca (external link).