Lakelands Public Health says a cybersecurity incident discovered earlier this year may have compromised the personal and health information of approximately 60,000 current and former residents in the Peterborough area.
The organization, created through the merger of the former Haliburton, Kawartha, Pine Ridge District Health Unit and Peterborough Public Health, said the breach was identified on Jan. 29, 2026, and affected only the IT server at its Peterborough office.
According to a public notice issued by the health unit, an unauthorized third party gained remote access to a limited section of its network, extracting and encrypting files containing personal and personal health information. Officials say all affected files were successfully restored from backups.
Lakelands Public Health has reported the incident to the Information and Privacy Commissioner of Ontario and notified law enforcement.
A forensic investigation determined that individuals who received services through the Peterborough office between 1996 and January 2026 may have been impacted.
The information potentially involved includes names, dates of birth, addresses, telephone numbers, OHIP numbers, medical diagnoses, medication and treatment details, vaccination records, billing codes, dates of service, and healthcare provider information. The health unit noted that not every affected individual had all categories of information included in the breach.
At this time, officials say there is no evidence that any of the data has been misused, published online, or used in identity theft or fraud.
Immediately after discovering the incident, Lakelands Public Health said it isolated affected systems, engaged external cybersecurity specialists, launched a forensic investigation, and implemented additional security measures to protect its network.
“Protecting personal information and personal health information in our care remains a top priority,” the organization said in its statement.
Residents who used public health services in Peterborough over the past three decades are encouraged to remain vigilant by monitoring personal accounts, reporting suspicious activity, and being cautious of unsolicited requests for personal information.
The health unit emphasized that it will never contact individuals by email or text message requesting sensitive information.
People seeking additional information about the incident can contact Lakelands Public Health by telephone during regular business hours. The organization says updates will be posted publicly if any future developments emerge.
