In a report by Cyber Insider, York University disclosed a cybersecurity incident involving the unauthorized theft of personal information from various departmental online forms.
The university discovered the breach on Oct. 25, 2026, and engaged external experts to secure its systems. The incident impacted 14 departmental and faculty websites, including the Schulich School of Business and the Lassonde School of Engineering. Stolen records, dating as far back as 2007, include contact details, dates of birth, academic histories and, in some cases, sensitive information such as medical diagnoses, disability status and financial data. York University, a Toronto-based institution with over 53,500 students, stated that most compromised records contained only identification numbers and contact information. The university reported the event to law enforcement and the Ontario Information and Privacy Commissioner. While the institution has implemented security upgrades, it is offering two years of credit monitoring to individuals whose government identification or financial data was exposed. Affected parties are encouraged to monitor their accounts for suspicious activity and utilize multifactor authentication. The university continues to investigate the scope of the unauthorized access while providing support to those impacted by the data theft.
Source: Cyber Insider
