Health PEI notifies the public of a privacy incident

Health PEI is notifying the public of a privacy incident involving a file containing personal health information about some individuals.

During a cybersecurity incident affecting a company providing services to Health PEI, an unauthorized person obtained a copy of a Health PEI file that was created in 2011.

"Based on the information available today, we believe the risk that this information will be misused is low," said Laurae Kloschinsky, interim CEO of Health PEI. "We recognize that learning about a privacy incident involving personal health information may be concerning. We take the privacy and protection of personal health information seriously and are notifying the public to be transparent and to ensure potentially affected individuals are aware of the incident."

The affected file was created in 2011 and relates to individuals who were eligible for health care services in PEI during or before that period.

Your information may have been included in the file if you:

• had a PEI health card number in or before 2011; or
• were a non-resident of PEI who received health services in PEI between 2008 and 2011.

The file contained health card information, including some or all of the following information about affected individuals: first name (including middle initial or name), last name, date of birth, date of death (where applicable), gender, PEI Personal Health Number (PHN), and Medicare eligibility information.

The incident was limited to the company’s systems. Health PEI and Government of Prince Edward Island systems were not compromised or impacted, and records stored within government systems were not accessed inappropriately.

Health PEI has reported this incident to the PEI Information and Privacy Commissioner, and a file has been opened by their office. The Commissioner’s office plans to provide opportunities for affected individuals to provide input and will post updates on its website as the investigation continues: www.oipc.pe.ca. Law enforcement has also been notified.

More information, including the Public Notice and Frequently Asked Questions, is available at https://HealthPEI.ca/PrivacyBreach2026

Individuals who have questions or wish to report suspicious communication or activity may contact the Health PEI Privacy Office at: Telephone: 1-800-375-3503 (toll-free)  Email: privacybreach2026@ihis.org

Media Contact:   
Dave Atkinson   
Senior Communications Officer, Health PEI 
datkinson@ihis.org