2025 Autism Services of Saskatoon — ransomware; SK commissioner 2,168 affected
Data compromised
Names, DOB, addresses, SIN, health card numbers, medical information, credit card information for 2,168 people per commissioner/CBC reporting
Technical writeup
Verified regulator report — incident March 20, 2025; public reporting August 2026. Autism Services of Saskatoon discovered a ransomware attack when systems became inaccessible on March 20, 2025, isolated affected systems, and concluded data had likely been taken. Saskatchewan Information and Privacy Commissioner Grace Hession David reported more than 2,000 people affected; CBC summarized stolen data including names, dates of birth, addresses, social insurance numbers, health card numbers, medical information, and credit card information for 2,168 individuals. The organization notified affected people and improved IT security per the commissioner. recordsAffected 2168 from commissioner/CBC; companyConfirmed true.
Root cause
Ransomware discovered March 20, 2025 when systems became inaccessible; data likely taken before isolation — Saskatchewan Information and Privacy Commissioner report (Aug 2026)
References
- https://databreaches.net/2026/08/26/a-recommendation-from-the-saskatchewan-information-and-privacy-commissioner-caught-our-eye/
- https://www.cbc.ca/news/canada/saskatoon/autism-services-data-breach-privacy-commissioner-9.7311558
- https://www.canlii.org/en/sk/skipc/doc/2026/2026canlii83681/2026canlii83681.html