{
  "id": 2397934,
  "title": "SickKids children’s hospital bandages up careers website after intruder breaks in",
  "url": "https://urgent.news/2026/08/21/sickkids-childrens-hospital-bandages-up-careers-website-after",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-21T15:45:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/08/21/sickkids-childrens-hospital-bandages-up-careers-website-after-intruder-breaks-in/5291098"
  },
  "original_language": "en",
  "account": "Toronto’s Hospital for Sick Children, also known as SickKids, has revealed that sensitive data of current and former staff, as well as job applicants, was exposed after a cyber intruder exploited a security flaw in a third-party software application utilized by the hospital. The breach specifically targeted the hospital's external careers website, which has since been restored. The hospital emphasized that clinical systems and patient information remained unaffected, and patient care continued as normal.\n\nSickKids clarified that current and former employees of the hospital, the SickKids Foundation, and its Vaughan, Ontario-based Boomerang clinic, as well as job applicants, may all be affected by the breach. The hospital refrained from commenting on the extent of the data breach but assured that individuals identified as affected would receive identity and credit monitoring services. Out of caution, all potentially impacted individuals were notified and offered 24 months of complimentary credit monitoring and identity protection services.\n\nSickKids has a history of grappling with cyber threats. On December 18, 2022, the hospital fell victim to a LockBit ransomware affiliate, an attack that was particularly severe for LockBit, which in turn earned a highly unusual apology from the attackers on December 31, 2022. The LockBit affiliate promised to offer SickKids a free decryptor and expelled the perpetrator from their program. Despite the grim circumstances, SickKids managed to recover around 60 percent of its systems within the given timeframe, refusing to pay the ransomed sum.\n\nHowever, the LockBit affiliate's kindness proved short-lived, as the group reverted to its usual extortion tactics exactly a year later, refusing to roll back the attack on Saint Anthony Hospital, a children's healthcare facility in Chicago.",
  "summary": "Toronto org says it wasn’t the only one to be affected by the third-party software vulnerability",
  "key_points": [
    "Sensitive data of current and former staff exposed in breach",
    "Careers website restored after cyber intruder exploited flaw",
    "Affected individuals offered 24 months of credit monitoring services"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "SickKids children’s hospital bandages up careers website after intruder breaks in",
        "url": "https://urgent.news/2026/08/21/sickkids-childrens-hospital-bandages-up-careers-website-after-2402701",
        "published": "2026-08-21T15:45:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}