WRHN Security Incident May Have Exposed Patient Data of Thousands

• •WRHN's security incident may have affected the personal health information of 150,000 patients.
• •The breach was contained on January 13, 2026, and did not impact WRHN's internal systems.
• •Patients have been notified and are advised to be cautious of suspicious communications.

The Waterloo Regional Health Network (WRHN) reported a security incident that may have compromised the personal health information of approximately 150,000 patients. The breach involved a third-party system used to transmit patient care information to primary health care providers and occurred outside of WRHN's internal network. Although the incident was contained on January 13, 2026, WRHN cannot rule out the possibility that personal health information was accessed. Affected patients received a notification letter dated March 27, 2026, informing them of the potential exposure and reassuring them that the likelihood of misuse is low. WRHN has reported the incident to the Ontario Privacy Commissioner and is monitoring the situation. No immediate action is required from patients, but they are advised to remain vigilant for suspicious communications.