SickKids employee and applicant data exposure
Data Leak
Summary
Hide ▲
Show ▼
A SickKids cybersecurity incident exposed personal information for current and former employees, Boomerang and SickKids Foundation staff, and job applicants, creating identity-theft and social-engineering risk. The hospital says the exposure came from a third-party software flaw and that clinical systems and patient records were untouched. The public Careers website was temporarily taken offline and later restored. Individuals identified as affected will be notified directly, and SickKids is offering 24 months of credit monitoring and identity protection.
Related Happenings
New York City Health and Hospitals Corporation hit by cyberattack
Incident
H score59
First: 18.05.2026 15:58
Last: 18.05.2026 15:58
Sources 1
About this happening:
The New York City Health and Hospitals Corporation disclosed a data breach that exposed sensitive records and affected 1.8 million individuals. Investigators found t...
New York City Health and Hospitals Corporation hit by cyberattack
IncidentAbout this happening: The New York City Health and Hospitals Corporation disclosed a data breach that exposed sensitive records and affected 1.8 million individuals. Investigators found t...
Monroe University stolen-data breach affecting 320,973 people
Data Leak
H score56
First: 14.01.2026 10:57
Last: 14.01.2026 10:57
Sources 1
About this happening:
The Monroe University data leak now has a confirmed scope of 320,973 affected individuals, raising the risk of identity theft and account abuse. Attackers accessed the uni...
Monroe University stolen-data breach affecting 320,973 people
Data LeakAbout this happening: The Monroe University data leak now has a confirmed scope of 320,973 affected individuals, raising the risk of identity theft and account abuse. Attackers accessed the uni...
Timeline
-
21.08.2026 13:10 2 articles · 2h ago
SickKids discloses employee and applicant data exposure
Initial DisclosureThe Hospital for Sick Children (SickKids) disclosed that personal information for some current and former employees, Boomerang and SickKids Foundation staff, and job applicants was exposed through unauthorized access tied to a third-party software vulnerability. Clinical systems and patient records were not affected, the public-facing Careers website was temporarily pulled offline and has since been restored, and the hospital launched an investigation with outside cybersecurity experts while offering 24 months of credit monitoring and identity protection.
Show sources
- SickKids data breach exposes employee and job applicant info — www.bleepingcomputer.com — 21.08.2026 13:10
- SickKids data breach exposes employee and job applicant info — www.bleepingcomputer.com — 21.08.2026 13:10