SickKids cybersecurity breach exposes employee data in Toronto

The Hospital for Sick Children in Toronto confirmed a cybersecurity breach exposing personal information of some current and former employees. The incident temporarily affected its external careers website, which has since been restored. Clinical systems and patient data were not compromised. The breach, first identified on July 9, involved a third-party software vulnerability and affected staff at SickKids, the SickKids Foundation, and Boomerang Health. The impacted system supported careers and human resources functions, including payroll. Individuals employed between Dec. 12, 2016 and Aug. 31, 2018 may have had sensitive data exposed. The hospital is offering 24 months of complimentary credit monitoring and identity protection to all potentially impacted individuals. An investigation is ongoing, and those determined to have been affected will be notified directly.