CRA / shared residency, most likely used legitimate insured provider. Legally nothing I can do - right?