CVE Tools
Back to feed
Incident SickKids data-breach supply-chain

SickKids data breach exposes employee and job applicant info

BleepingComputer·By Ax Sharma··3 min read
CVE Tools coverage

The Hospital for Sick Children (SickKids) has revealed that personal data belonging to current and former employees, as well as job applicants, was accessed during a cybersecurity incident. The hospital attributes the breach to a vulnerability in an unspecified third-party application, which has since been remediated.

While clinical systems and patient records remain secure, the incident prompted a temporary takedown of the institution's public Careers website. SickKids is currently reviewing the scope of the exposure with external experts and will notify affected individuals directly, offering complimentary credit monitoring services in the interim.