A ransomware attack and subsequent personal data loss affecting five Ontario hospitals is under review by Ontario's Information and Privacy Commissioner, IT World Canada reports. In a statement, the IPC said it is "actively investigating" the attack involving 267,000 total patients and whether the hospitals' allegedly failed to protect patient data under the provincial Personal Health Information Protection Act.