SickKids Data Exposure Stays Outside Patient Systems
Toronto’s Hospital for Sick Children (SickKids) said a cybersecurity incident exposed personal information for some current and former employees and job applicants, and that the problem came from third-party software. The hospital said its clinical systems and patient records were not affected.
The flaw sits in a vendor-connected system that held HR-style data, so the exposure is privacy loss rather than disruption to care. In plain terms: a breach in an outsourced application reached staff and applicant records, but it did not spill into the systems that support patient treatment.
For hospitals that outsource recruiting or personnel platforms, the boundary matters: a compromise in that layer can still create a data breach without touching clinical operations. What remains at stake here is the confidentiality of employee and applicant files, not patient care systems.
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen
The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.
SickKids data breach exposes employee and job applicant info
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software.