In keeping with our commitment to transparency and following privacy legislation, Casey House is informing clients of an incident that occurred during the implementation of our new electronic health record (EHR) system.
On July 11, 2025, a software issue caused limited personal health information of Casey House clients to be inadvertently included in an upload to medical database software developed by the Ministry of Health, Ontario Health and a small group of trusted third-party vendors that support the use our new EHR system. This was identified July 14, 2025 and Casey House was made aware of it July 15.
The information disclosed was limited to clients’ name, date of birth, sex, health card number, mailing address and telephone number.
Importantly, there was no clinical, diagnostic, or treatment-related information uploaded, such as medical history or HIV status. Further, nothing connected those in the dataset to Casey House. No financial information or social insurance numbers were exposed.
This information was uploaded to third-party medical database software, but their front-users did not or could not access it.
Upon discovery of this error, we acted quickly, and an investigation was launched to determine what happened. The Ministry of Health, Ontario Health, and the third-party vendors involved cooperated fully with the investigation. They have already taken or are taking steps to permanently delete the information from their systems. In other words, we have removed the information from anywhere it is not supposed to be.
At Casey House, we take the privacy of our clients’ information seriously and we are sorry this happened. We are taking all necessary steps to prevent a similar incident from happening again, including conducting a thorough review of our systems and processes with partners.
We do not believe this incident poses any real risk to you or requires any action on your part.
In conjunction with Mackenzie Health, we reported the matter to the Information and Privacy Commissioner of Ontario (IPC). As a Casey House client impacted by this situation, you are entitled to make an individual complaint to the IPC (visit ipc.on.ca).
If you have any questions or concerns or would like to speak with someone directly, please contact our privacy officer Rosemary Feeney at privacy@caseyhouse.ca
We appreciate your understanding and continued trust.
September 10, 2025
Privacy incident announcement
In keeping with our commitment to transparency and following privacy legislation, Casey House is informing clients of an incident that occurred during the implementation of our new electronic health record (EHR) system.
On July 11, 2025, a software issue caused limited personal health information of Casey House clients to be inadvertently included in an upload to medical database software developed by the Ministry of Health, Ontario Health and a small group of trusted third-party vendors that support the use our new EHR system. This was identified July 14, 2025 and Casey House was made aware of it July 15.
The information disclosed was limited to clients’ name, date of birth, sex, health card number, mailing address and telephone number.
Importantly, there was no clinical, diagnostic, or treatment-related information uploaded, such as medical history or HIV status. Further, nothing connected those in the dataset to Casey House. No financial information or social insurance numbers were exposed.
This information was uploaded to third-party medical database software, but their front-users did not or could not access it.
Upon discovery of this error, we acted quickly, and an investigation was launched to determine what happened. The Ministry of Health, Ontario Health, and the third-party vendors involved cooperated fully with the investigation. They have already taken or are taking steps to permanently delete the information from their systems. In other words, we have removed the information from anywhere it is not supposed to be.
At Casey House, we take the privacy of our clients’ information seriously and we are sorry this happened. We are taking all necessary steps to prevent a similar incident from happening again, including conducting a thorough review of our systems and processes with partners.
We do not believe this incident poses any real risk to you or requires any action on your part.
In conjunction with Mackenzie Health, we reported the matter to the Information and Privacy Commissioner of Ontario (IPC). As a Casey House client impacted by this situation, you are entitled to make an individual complaint to the IPC (visit ipc.on.ca).
If you have any questions or concerns or would like to speak with someone directly, please contact our privacy officer Rosemary Feeney at privacy@caseyhouse.ca
We appreciate your understanding and continued trust.
More