Notice to Parents and Caregivers of CHEO Home & Community Care Patients: OMS Data Breach

Notice to Parents/Guardians/Caregivers of CHEO Home & Community Care Patients re: Ontario Medical Supply Data Breach

CHEO was recently advised that Ontario Medical Supply (OMS), one of its third-party vendors, experienced a cybersecurity incident in April 2025.

CHEO has been advised that orders placed with OMS between September 2021 and March 2025 for medical supplies used in delivering at home care were impacted by this incident. The personal health information contained in those supply orders included: patient names, contact information (home address and phone number), and details of medical supplies or equipment ordered.

Protecting the privacy and security of patients’ health information is a top priority. Throughout this process, CHEO and OMS remained focused on ensuring patients continued to receive the medical supplies and equipment they need while mitigating any further privacy and security risks. CHEO has reported this incident to the Information and Privacy Commissioner of Ontario (IPC), and an investigation is ongoing. While affected parties may file a complaint with the IPC, it is not required given the active investigation.

If your child/youth receives home and community care and you have questions related to this breach, you can call us at 613-737-7600 ext. 3646 or email us at privacy@cheo.on.ca