Health PEI Notice of Privacy Incident – Frequently Asked Questions

Who may be affected? 

The affected Health PEI file was created in 2011 and relates to individuals who were eligible for healthcare services in PEI during or before that period.

Your information may have been included in the file if you:

• had a PEI health care number in or before 2011; or
• were a non-resident of PEI who received health services in PEI between 2008 and 2011.

What information was involved?

The file contained some or all of the following information about affected individuals:

• Identifying and demographic information: first name (including middle initial or name), last name, date of birth, date of death (where applicable) and gender
• PEI Personal Health Number (PHN)
• Medicare eligibility information: start and end dates, eligibility code, eligibility end reason
• Health card information: issue date, expiry date, and health card reason code

What happened?

An unauthorized person obtained a copy of a Health PEI file during a cybersecurity incident affecting a company providing services to Health PEI. Health PEI and Government of Prince Edward Island systems were not compromised or impacted and records stored within government systems were not accessed inappropriately.

What is the risk to me?

Based on the information available today, Health PEI believes the risk that the information will be misused is low. 

What should I do?

Be alert for suspicious emails, text messages, or telephone calls that request personal information or claim to relate to health coverage, government programs, or identity verification. Always verify the identity of anyone requesting personal information.

If you receive suspicious communications or notice activity that you believe may be related to this incident, please report it to Health PEI. These reports will help us monitor the situation and assess whether the risk has changed.

Individuals who wish to report suspicious communications or activity, or who have questions about this notice, may contact:

Health PEI Privacy Office
Telephone: 1-800-375-3503 (toll-free)
Email: privacybreach2026@ihis.org

Why is Health PEI notifying the public?

Health PEI is providing this notice to be transparent and to ensure that potentially affected individuals are aware of the incident.

Has this incident been reported to law enforcement or the Privacy Commissioner?

Yes. Health PEI has reported the incident to the PEI Information and Privacy Commissioner, and the Commissioner’s office has opened a file. The Commissioner’s office plans to provide opportunities for affected individuals to provide input and will post updates on its website as the investigation continues: www.oipc.pe.ca. Law enforcement has also been notified.

What is Health PEI doing in response?

Health PEI will continue to monitor the situation and take any additional steps that become appropriate based on the information available. The company is reviewing its processes and implementing measures to reduce the risk of a similar incident happening again.