CuraSec

Learn active

SickKids data breach exposes employee and applicant PII via third-party flaw

2026-08-21 11:38 UTC · BleepingComputer · read the source ↗ #data-breach#third-party-risk#healthcare
  • Engineer — Skip
  • SOC/IR — Skip
  • Leader — Learn: A third-party software flaw exposed HR-category data (employee and applicant records) at a major hospital with no patient-record impact — a useful reference case for vendor risk assessments covering HR/recruiting platforms, particularly in healthcare.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.