Canopy Health Confirms Cyberattack, Patients Not Notified for Six Months

Canopy Health disclosed an intrusion discovered on 18 July 2025 in which an unknown actor temporarily gained unauthorized access to an internal server and may have copied data, potentially including a small number of bank account numbers; the breach was publicly acknowledged months later and notification delays have provoked patient concern. The report also notes a separate Manage My Health security incident involving ransomware that affected approximately 125,000 patients, highlighting systemic transparency and data-protection issues in the healthcare sector.