Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen

**Executive summary:** The Hospital for Sick Children (SickKids) reported a cybersecurity incident likely linked to a third‑party application that resulted in the theft of personal information for current and former employees, job applicants, and related organization staff; no clinical systems or patient records were affected and impacted individuals have been offered two years of credit monitoring. The notice follows a 2022 ransomware attack that previously disrupted hospital systems.