A cybersecurity incident that affected the Kinsmen Foundation of Saskatchewan earlier this year is worse than initially thought. An investigation has found more personal data was compromised during the hack. In an update Thursday, the foundation said it discovered that social insurance numbers and health information required to process grant applications were also affected. Initially, the organization believed only donor contact info and email addresses had been affected. “We want to be clear: we have no evidence that any personal information has been misused. Still, we are notifying every affected individual personally and telling them what information of theirs was involved,” the update read. In April 2026, an unauthorized third-party accessed some of the foundation’s systems. Kinsmen notified its donors on May 20, saying the foundation informed police as soon as it discovered its systems had been breached. The organization also engaged third-party security firm Cyberscout to investigate and help beef up its security processes, according to the message at the time. In Thursday’s update, the foundation apologized to all those affected by the breach. “We also want to say, plainly: we are sorry,” the update read. “We built this organization on trust, generosity, and the goodwill of the communities we serve. We have learned that all Canadian organizations, including charitable organizations such as ours are potential targets for cyber-attacks such as these. It is our responsibility to make sure every person affected has the answers and support they need.” The foundation says it is working with Transunion Canada to offer a year of complimentary credit monitoring to every person whose information was affected. More to come…
