SickKids hospital restores careers portal after data breach via third-party software flaw
Toronto's Hospital for Sick Children confirmed that an intruder accessed personal data of staff and job applicants by exploiting a vulnerability in a third-party application, prompting a temporary shutdown of its external careers site.
An unauthorized actor exploited a security weakness in a third-party software tool used by the Hospital for Sick Children in Toronto, exposing personal information belonging to current and former staff, the SickKids Foundation, the Boomerang clinic in Vaughan, Ontario, and recent job applicants. The hospital clarified that its clinical systems and patient data were not compromised, and that medical services proceeded as normal.
The external careers portal was taken offline during the incident and has now been restored. SickKids said it will notify all individuals determined to be affected and, as a precaution, has offered 24 months of complimentary credit monitoring and identity-protection services to anyone potentially impacted. The organization reaffirmed its commitment to safeguarding personal data and indicated ongoing efforts to strengthen its cybersecurity posture.
Why it matters
A data breach at a major children's hospital puts staff and applicant privacy at risk and highlights the dangers of third-party software vulnerabilities.
In this story
