York University investigating cybersecurity incident, data theft - CityNews Toronto
York University is investigating a cybersecurity incident that resulted in the theft of personal data from its systems.
The school said an unauthorized actor accessed information of individuals who completed online forms on select websites, such as residence applications and surveys, ranging from 2007 to October 2026.
The breach, discovered on Oct. 25, was limited to a specific list of websites and faculties posted on their website, the school said.
York University said a small number of directly affected individuals had their government identification or financial account information exposed.
Investigation and response
The university did not disclose when the incident took place or when it discovered the breach. The investigation found no evidence that the unauthorized actor moved beyond the affected websites or accessed other parts of the university.
Affected individuals should remain alert for suspicious emails, text messages and telephone calls, particularly communications asking for personal information or directing them to unfamiliar websites.
The school said it immediately began an investigation into the breach alongside the help of external experts.
The incident was reported to the Information and Privacy Commissioner of Ontario and law enforcement.
Support for affected individuals
The university is offering two years of complimentary TransUnion credit monitoring and identity theft protection to the individuals who had their government or financial information exposed.
It is also asking the affected individuals, who will be contacted directly, to monitor their financial accounts.
Related
