Mount Royal University cyberattack compromised student, employee data

Cbc.Ca • July 7, 2026

Share: View original

The school is offering 2 years of credit monitoring and identity theft protection

Image | Mount Royal University (MRU)

Caption: Mount Royal University posted an update on Tuesday the cyberattack it faced last month. (CBC News)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mount Royal University Cyberattack: Data Stolen and Deleted in Ransomware Incident Mount Royal University (MRU) confirmed a ransomware cyberattack that occurred on June 18, 2026, affecting both student and employee data. Unauthorized actors accessed and stole data from specific folders on the university's H drive, subsequently deleting the contents to obstruct recovery efforts. The J drive, which contained departmental data, was also deleted, but there is no evidence it was accessed. The university is notifying affected individuals and offering two years of credit monitoring and identity theft protection. The investigation is ongoing, with law enforcement and the Alberta Information and Privacy Commissioner involved. Recovery of the deleted data may take weeks or months. The threat group CMD Organization claimed responsibility and demanded a ransom of 30 BTC, approximately $1.9 million. 10 sources 69

Extracted Entities

Attack Types (1)

Companies (1)

Mount Royal University

CWE Weaknesses (1)

CWE-200 - Exposure of Sensitive Information