SickKids data breach exposes employee and job applicant info

The Hospital for Sick Children disclosed unauthorized access to its public-facing careers site—attributed to a vulnerability in third-party software—that may have exposed personal information of current and former employees, SickKids Foundation staff, and job applicants. Clinical and patient systems were not affected; the hospital has restored the site, launched an investigation with external cybersecurity experts, will notify affected individuals, and is offering 24 months of credit monitoring.