SickKids Employee Data Breach

The Hospital for Sick Children in Toronto disclosed that a vulnerability in unidentified third-party software exposed personal information belonging to current and former employees, job applicants, and affiliated staff.

SickKids took its Careers website offline, began an investigation with external cybersecurity experts, and offered affected individuals 24 months of credit monitoring and identity protection, while reporting that clinical systems and patient records were not affected. The hospital has not yet disclosed the data categories, number of affected people, or intrusion timeline.