
How a ransomware attack left an Ontario government health agency scrambling
Global News
Back in spring 2025, a vendor for an Ontario health agency was hit with a ransomware attack. It set-off weeks of confusion as officials tried to work out who was impacted.
It was early June when representatives of the Ford government’s home care agency penned an increasingly frustrated and urgent legal letter to one of its vendors.
Weeks after a ransomware attack, officials were still trying to work out how many Ontarians had been impacted.
“Just want to reiterate the urgency around the numbers,” a representative of Ontario Health atHome wrote in an email on June 9, 2025.
“We really need to understand our actual exposure (not the potential exposure). Anything you and your client can do to expedite and provide this information sooner rather than later would be appreciated.”
Two months earlier, the company — Ontario Medical Supply (OMS) — had informed Ontario Health atHome its systems had been breached.
The breach would turn out to be a ransomware attack which impacted some 200,000 home care patients in Ontario. A government report suggests OMS ultimately paid the ransom demanded to get access to its servers again.
Despite not knowing for weeks how many patients were impacted, the Ministry of Health did not reveal the cyberattack until an Ontario Liberal MPP sounded the alarm in late June 2025.
Before that, hundreds of pages of internal emails and reports, obtained by Global News using freedom of information laws, reveal a tense scramble to see what data had been compromised and what should be done.













