
York University investigating cybersecurity incident, data theft - Yahoo News Canada
York University is investigating a cybersecurity incident that resulted in the theft of personal data from individuals who completed online forms on select websites between 2007 and October 2026.
The unauthorized actor accessed information from individuals who completed online forms on a specific list of websites and faculties, ranging from 2007 to October 2026. The school said the breach was limited to these affected websites and that there is no evidence the actor moved beyond them.
The incident was discovered on October 25, and the university immediately began an investigation with the help of external experts. It is also asking the affected individuals, who will be contacted directly, to monitor their financial accounts.
Affected individuals should remain alert for suspicious emails, text messages and telephone calls, particularly communications asking for personal information or directing them to unfamiliar websites.
The school is offering two years of complimentary TransUnion credit monitoring and identity theft protection to the individuals who had their government or financial information exposed. It also regrets the circumstances and recognizes that the incident may be concerning to those affected.