Canada Life to acquire Santé Circle Health, a leader in disability management. May 19, 2026 WINNIPEG, MB, May 19, 2026 - Canada Life today announced that it has acquired Santé Circle Health, a provider of disability management and occupational health services. Santé Circle Health is recognized for its capabilities in early intervention, provider management and digital intake, supporting timely recovery and return to work outcomes. "Strong disability management plays an important role in how we support plan members and deliver value for plan sponsors," said Julia McGillis, Executive Vice President, Workplace Benefits & Retirement at Canada Life. "This acquisition supports our strategy to strengthen and modernize our disability offering in ways that matter most to members and customers." Canada Life and Santé Circle Health share a focus on improving recovery outcomes and helping people return to work and daily life with confidence. Disability management is an important part of the value group benefits provide Canadians, influencing member experience, sponsor confidence and long term outcomes. Santé Circle Health's capabilities complement Canada Life's existing disability case management strengths and create opportunities to improve outcomes over time. There are no changes today for Santé Circle Health employees, clients, or suppliers. Santé Circle Health will continue to operate as an independent organization with its own leadership team and employees. Over time, Canada Life expects to explore complementary opportunities that build on the strengths of both organizations and support improved member outcomes and experience. About Canada Life Canada Life is a leading insurance, wealth management and benefits provider focused on improving the financial, physical, and mental well-being of Canadians. For over 175 years, individuals, families and business owners across Canada have trusted Canada Life Group to provide sound guidance and deliver on the promises Canada Life Group has made. Canada Life Group proudly serve more than 14 million customer relationships from coast to coast to coast. Canada Life is a subsidiary of Great-West Lifeco Inc. and a member of the Power Corporation of Canada group of companies. Visit canadalife.com to learn more. About Santé Circle Health Santé Circle Health is a leader in disability management and occupational health services, focused on early intervention, provider integration and care coordination. May 19, 2026 Canada Life today announced that it has acquired Santé Circle Health, a provider of disability management and occupational health services. May 13, 2026 Canada Life Investment Management Ltd. is announcing changes to certain sub-advisors and investment strategies on select mutual funds that took effect May 12, 2026. May 11, 2026 The Canada Life Assurance Company ("Canada Life") today announced a series of changes across select segregated funds, reflecting its ongoing commitment to providing advisors and their clients with access to high-quality investment management expertise through a streamlined fund shelf.

Inside the Canada Life breach. Canada Life's recent data breach is a reminder that one compromised account can expose more than most organizations expect. Publicly disclosed on April 23, 2026, the incident involved a single employee account being used by the criminal extortion group ShinyHunters to access Canada Life's Salesforce environment, resulting in the confirmed exposure of personal information belonging to approximately 70,000 individuals, mostly members of one large corporate group benefits plan. While attackers have claimed they could reach up to 5.6 million records, Canada Life has not verified that number. What matters for Canadian organizations is not just the confirmed exposure count, but the lesson embedded in the gap between those two figures: how much access a single set of credentials can provide inside a modern SaaS (software as a service) platform. The information accessed, names, dates of birth, mailing addresses, gender, and income level, did not include SINs, banking data, or medical records, but it is still highly usable for fraud and targeted phishing. This is the kind of data commonly stored in CRMs (client relationship management) and benefits platforms and routinely accessed by staff as part of their job. ShinyHunters' tactics are now well established across Canada and globally: compromise an employee identity (often through phishing or social engineering), authenticate to a cloud platform like Salesforce as a legitimate user, and quietly export data before issuing a ransom demand. There was no software vulnerability involved; the platform behaved as designed. The failure point was identity access and monitoring, an uncomfortable reality for organizations that assume cloud platforms are "secure by default." For Canadian businesses, the takeaway is clear: identity is now the perimeter, and SaaS platforms must be configured with that reality in mind. One user account should not be capable of bulk-exporting large volumes of customer data without triggering alerts, step-up authentication, or human review. Multi-factor authentication is a baseline requirement under the Canadian Centre for Cyber Security's guidance, but phishing-resistant MFA, least-privilege access, and anomaly detection are increasingly necessary to meet regulator and customer expectations under PIPEDA. The Canada Life breach shows that attackers no longer need to "hack in," they just need to log in. The question for every Canadian organization is whether their controls would stop, detect, or limit that access before it turns into a reportable breach.