SickKids cybersecurity breach exposes employee data, offers credit monitoring

The Hospital for Sick Children in Toronto confirmed a cybersecurity breach exposed personal information of some current and former employees, though patient data and clinical systems were unaffected. The incident, first identified on July 9, involved a third-party software vulnerability and temporarily impacted the hospital's external careers website, which has been restored. Data from SickKids Foundation and Boomerang Health workers was also compromised. Potentially affected individuals, including those employed between December 2016 and August 2018, have been offered 24 months of credit monitoring. This follows a 2022 ransomware attack that disrupted hospital operations for weeks.