cybercrime<\/p>\n
Toronto org says it wasn\u2019t the only one to be affected by the third-party software vulnerability<\/p>\n
Toronto\u2019s Hospital for Sick Children, commonly referred to as SickKids, says the data of current and former staff, as well as job applicants, was exposed after an intruder exploited a security flaw in a third-party software application used by the hospital.<\/p>\n
SickKids, which may ring a bell for those who have kept close tabs on ransomware news in recent years, said the intrusion affected its external careers site, which has now been restored.<\/p>\n
\u201cClinical systems and patient information were not affected, and patient care has continued as usual,\u201d it said<\/a>, after explaining that the break-in was a result of a vulnerability in a \u201cthird-party software application used by SickKids and other organizations.”<\/p>\n Current and former employees of SickKids, the SickKids Foundation, and the hospital\u2019s Vaughan, Ontario-based Boomerang clinic may all be affected, as were SickKids job applicants.<\/p>\n The hospital did not comment on the scale of the breach, but said those affected will be offered the usual identity and credit monitoring services.<\/p>\n \u201cOur review of the impacted information is ongoing. Individuals determined to have been impacted will be notified directly, though, out of an abundance of caution, all potentially impacted individuals have been alerted and offered 24 months of complimentary credit monitoring and identity protection services.\u00a0\u00a0\u00a0<\/p>\n \u201cSafeguarding the privacy and security of personal information is a responsibility SickKids takes seriously. We remain committed to maintaining strong protections and continuously enhancing our cybersecurity measures to help protect the information entrusted to us.\u201d<\/p>\n SickKids\u2019 lucky ransomware escape<\/p>\n The children\u2019s hospital is no stranger to cyber struggles. On December 18, 2022, it was targeted by a LockBit ransomware affiliate<\/a> \u2013 a particularly egregious attack even for LockBit and one that attracted an overwhelmingly negative reaction.<\/p>\n The ransomware operator issued an ultra-rare apology on December 31, 2022, announcing that it would offer SickKids a free decryptor and that the affiliate who carried it out was expelled from the program. Banished from the darkest corner of cybercrime\u2026 now that\u2019s a feat.<\/p>\n By that time, however, SickKids had been handling the recovery well, and had restored around 60 percent of its systems after refusing to pay the crooks a ransom.<\/p>\n