SickKids children’s hospital bandages up careers website after intruder breaks in

https://image.theregister.com/235319.jpg?imageId=235319&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Toronto org says it wasn’t the only one to be affected by the third-party software vulnerability

Toronto’s Hospital for Sick Children, commonly referred to as SickKids, says the data of current and former staff, as well as job applicants, was exposed after an intruder exploited a security flaw in a third-party software application used by the hospital.

SickKids, which may ring a bell for those who have kept close tabs on ransomware news in recent years, said the intrusion affected its external careers site, which has now been restored.

“Clinical systems and patient information were not affected, and patient care has continued as usual,” it said, after explaining that the break-in was a result of a vulnerability in a “third-party software application used by SickKids and other organizations."

Current and former employees of SickKids, the SickKids Foundation, and the hospital’s Vaughan, Ontario-based Boomerang clinic may all be affected, as...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more