VANCOUVER – The personal health information of about 34,000 medical marijuana patients was accessed in a data breach of an electronic medical record system used by Sunniva Inc.’s Natural Health Services Ltd. subsidiary.
NHS says patients have been informed in the last week of the breach that occurred between Dec. 4, 2018 and Jan. 7.
It says the breach didn’t involve any financial, credit card or social insurance number information since those aren’t collected from patients.
However, personal injury firm Diamond and Diamond — which has announced a proposed class-action lawsuit against NHS and Sunniva — says it did involve diagnostic results, health-care numbers and personal contact information.
The company, which operates seven clinics in Canada, says it has been working with privacy protection and law