Cybersecurity Incident Notification â Brunswick Medical Center
April 25, 2025 – Important Notice on the Brunswick Health Group Cyber Incident
On April 9th, 2025, we announced that we had suffered a cyberattack. Unfortunately, the perpetrators of this attack accessed and stole personal information and personal health information regarding members of our community. We understand this news may be concerning for you.
You may be impacted by this incident if you received care at one of the following entities and fall within one of the groups of individuals described in this notice: Brunswick Health Group Inc., Brunswick Medical Center Inc., The Children’s Clinic @ Pointe-Claire Inc., Sanomed Solutions Inc., Brunswick Research Inc., Brunswick Minor Surgery Center Inc., Brunswick Endoscopy Inc., and 6892094 Canada Inc. ( collectively, the âBrunswick Health Groupâ )
Please read this notice in its entirety to understand how it impacts patients of the Brunswick Health Group. The purpose of this announcement is to notify those concerned by the incident.
Notification to Patients
This incident affects some group of patients as outlined below:Â
| Group | Information Exposed |
|---|---|
| Individuals who, as part of their care provided by Brunswick Health Group, underwent diagnostic testing, medical imaging, laboratory analysis, specialist consultations, surgical or therapeutic procedures, hospital admissions, or preventive health screenings at establishments external to Brunswick Health Group that are located outside the island of Montreal, between September 2020 and September 2024. | Depending on the type of result(s) that Brunswick Health Group received from the external establishment, the following personal information of individuals in this group may have been exposed: date of birth, RAMQ number, medical record number, personal contact details, such as name, mailing address, email address, and telephone number, diagnoses, test orders, laboratory values, imaging results, pathology findings, clinical impressions, specialist evaluations, procedure details, therapy progress notes, immunization information, prescribed medications, allergies, family medical history, genetic information, mental health notes, behavioral assessments, descriptions of hospital admissions, treatments administered, names and credentials of healthcare providers. |
| Individuals who, as part of their care provided by Brunswick Health Group, underwent diagnostic testing, medical imaging, or preventive health screenings at radiology centers external to Brunswick Health Group that are located on the Island of Montreal, between September 2020 and September 2024. | Depending on the type of results that Brunswick Health Group received from the external establishment, the following personal information of individuals in this group may have been exposed: date of birth, RAMQ number, medical record number, personal contact details, such as name, mailing address, email address, and telephone number, diagnoses, test orders, laboratory values, imaging results, pathology findings, clinical impressions, specialist evaluations, procedure details, therapy progress notes, immunization information, prescribed medications, allergies, family medical history, genetic information, mental health notes, behavioral assessments, descriptions of hospital admissions, treatments administered, names and credentials of healthcare providers. |
| Individuals who received, at any time between October 2020 and September 2024, medical service(s) from Brunswick Health Group related to a referral from a professional practicing in an establishment external to Brunswick Health Group. | Depending on the type of referral documents Brunswick Health Group received, the following personal information of individuals in this group may have been exposed: date of birth, personal contact details, such as name, mailing address, email address, and telephone number, RAMQ number, medical record number, referring doctor name and contact information, reason for referral, medical issue or symptoms, information regarding medical history, information regarding medication, allergies, ongoing treatments, test results, lab work, imaging studies, other diagnostics, requested services, specific procedures, tests or evaluations, and urgency level. |
| Individuals who received an Electrocardiogram (ECG) or a Stress Test at Brunswick Health Group at any time between October 2020 and September 2024. | Depending on the type of test that Brunswick Health Group provided, the following personal information of individuals in this group may have been exposed: date of birth, RAMQ number, medical record number, personal contact details, such as name, mailing address, email address, and telephone number, insurance details, test date and time, referring physician, indication for test, type of test, ECG findings and results, stress test findings and results, recovery data, impressions, interpretations, and recommendations. |
| Individuals who received obstetrical or gynaecological private ultrasounds at Brunswick Health Group at any time since 2015. | Depending on the type of ultrasound that Brunswick Health Group provided, the following personal information of individuals in this group may have been exposed: date of birth, RAMQ number, medical record number, personal contact details, such as name, mailing address, email address, and telephone number, appointment details (date, time, type, and reason), obstetrical findings and reports, gynecological findings and report details (such as clinician names, findings, and impressions). |
| Individuals who underwent colonoscopy procedures at Brunswick Health Group, including those provided with the McGill University Health Centre or the Montreal West Island Integrated University Health and Social Services Centre, between October 2019 and November 2024. | The following personal information about individuals in this group may have been exposed: date of birth, RAMQ number, medical record number, personal contact details, such as name, mailing address, email address, and telephone number, appointment details (date, time, type, and reason), medical history, medication information and allergies, procedure and exam details and results, findings and report details (such as clinician names, findings, impressions), treatment and recovery information and follow-up plans. |
FAQ – Frequently Asked Questions
What Happened? Â
On March 24, 2025, Brunswick Health Group experienced a cyberattack that impacted some of its IT systems. That same day, cybersecurity experts were engaged to contain the incident and to investigate. We can confirm that an unauthorized actor accessed and took personal information and personal health information of members of our community from our systems.
How Can I Protect Myself?
All of us should remain vigilant in identifying phishing attempts and other suspicious communications and should regularly check our account statements for unauthorized transactions. It is also best practice to avoid clicking on links or downloading attachments from unknown or suspicious sources. The Canadian Anti-Fraud Centre and the Commission dâaccĂšs Ă lâinformation also provide additional resources that you can review to learn more on how to protect yourself from identity theft and other common scams.
What Measures Are We Taking?
We are currently conducting an analysis of the impacted information and are publicly notifying those impacted of the incident. The Commission dâaccĂšs Ă lâinformation, SantĂ© QuĂ©bec, the MinistĂšre de la SantĂ© et des Services sociaux, and law enforcement have been informed of the situation.
What’s Next?
We are aware that this incident has affected our community in a direct way. Our investigation is ongoing, and we may need to notify others in time. Know that we are also committed to reinforcing our cybersecurity program to better protect against future incidents.
For More Information
If you have any questions about the incident, please contact us at [email protected].