Incidents involving:

The Hospital for Sick Children (SickKids)

Vulnerability exploitContainedAugust 20, 2026

SickKids employee data breach (third-party software flaw)

Toronto's Hospital for Sick Children (SickKids) disclosed that a vulnerability in a third-party software application exposed personal information of current and former employees and job applicants, while clinical systems and patient data were unaffected.

Victim: The Hospital for Sick Children (SickKids)

RansomwareResolvedDecember 18, 2022

SickKids hospital ransomware attack

Toronto's Hospital for Sick Children was hit by a ransomware attack over the December 2022 holidays that delayed lab and imaging results; in a rare move, the LockBit gang apologized, blamed a rogue affiliate, and released a free decryptor.

Victim: The Hospital for Sick Children (SickKids)