Sickkids.Ca SickKids Data Breach Exposes Employee and Job Applicant Information
Article Content
- •SickKids experienced a data breach due to a third-party software vulnerability.
- •Personal information of current and former employees and job applicants was exposed.
- •The hospital is offering 24 months of credit monitoring to affected individuals.
The Hospital for Sick Children (SickKids) reported a cybersecurity incident exposing personal information of current and former employees and job applicants. The breach was linked to a vulnerability in a third-party software application, affecting the hospital's external Careers website, which has since been restored. Clinical systems and patient records remained unaffected, and patient care continued as usual. SickKids has engaged external cybersecurity experts to investigate the incident. The hospital has not disclosed the specific categories of data involved or the number of individuals affected. Affected individuals will be notified directly, and all potentially impacted individuals are being offered 24 months of complimentary credit monitoring and identity protection services. This incident follows previous security breaches at SickKids, including a ransomware attack in December 2022.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Lockbit, Boomerang and CVE-2023-34362 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PAYLOAD Ransomware Exploits Active Directory GPO for Disruption In April 2026, Kaspersky's Global Emergency Response Team (GERT) responded to a ransomware incident at a manufacturing organization in the Middle East. Attackers gained domain-admin-equivalent control via a compromised FortiGate SSL VPN account and created a malicious Group Policy Object (GPO) named PAYLOAD. This GPO… 
Threat Actors Exploit Windows Shadow Copies for Ransomware and Credential Theft Cybercriminals are increasingly abusing Microsoft’s Volume Shadow Copy Service (VSS) to facilitate ransomware attacks and steal credentials. They achieve this by deleting recovery options before deploying ransomware and extracting sensitive data from protected files, including the Active Directory database. Tools such…