Following the forensic investigation, eHealth advises that a breach of personal health information has potentially occurred. The breach impacted information on systems administered by eHS for the SHA and Ministry of Health. While the forensic investigation rendered no evidence that personal health information was compromised, the investigation was unable to rule out a breach of personal health information. The inability to absolutely verify that no privacy breach occurred is leading to public notification of a potential privacy breach involving personal information or personal health information. Upon discovery of the malware attack, eHealth Saskatchewan managed to contain and eliminate the malware and restore compromised files. However, the conclusion of a likely privacy breach follows findings in the forensic investigation that some files were sent to a suspicious IP address.