Notice of Cybersecurity Incident

On April 13, 2025, we detected suspicious activity on our company network. We immediately launched an investigation with third-party cybersecurity experts to assess the situation—confirming that our systems were impacted by a cyberattack. The attack encrypted our servers, including our customers’ personal information stored there, but we have now restored our network.

We have determined that a limited amount of incomplete data was exfiltrated during the incident. The affected information includes names, contact details, product descriptions, product quantity and order date. Importantly, there is no evidence that any personal financial information or critical health data was exfiltrated. There is also no evidence that any of the information has been misused.

In response to this incident, we have taken the following actions:

Implemented all necessary corrective measures across our systems and networks;
Promptly informed Ontario Health atHome;
Notified the Office of the Information and Privacy Commissioner of Ontario (IPC); and
Reported the event to law enforcement, including the Canadian Centre for Cybersecurity.

If you would like confirmation as to whether any of your information was impacted in this incident, please complete the form below and we will contact you. If your personal health information was impacted in this incident, then you are entitled to make a complaint to the Information and Privacy Commissioner of Ontario under the Personal Health Information Act, Part VI. 2016, c. 6, Sched. 1, s. 1(4).

Safeguarding the personal health information entrusted to us is our top priority, and we are committed to supporting any customers who have concerns or may have been affected by this incident.

Name(Required)

First Last

Home or Delivery Address(Required)

Street Address Address Line 2 City Province Postal Code

Email Address (for follow up)(Required)

Comments

This field is for validation purposes and should be left unchanged.