The Toronto Public Library says information on current and former employees has likely been taken in a cyberattack, including social insurance numbers and copies of government-issued identification.
I never understand companies, corporations and services asking for and documenting SIN numbers .... I learned decades ago that the only entity that should use your SIN is the government. I was taught that banks don't even need it ... they say they do but it isn't necessary.
Because once your SIN is compromised ... it will be absolutely terrible to do anything about it.