Mount Royal University Data Breach Exposes Student and Staff Information

Mount Royal University (MRU) confirmed a ransomware cyberattack that occurred on June 18, 2026, compromising data of students and staff. The unauthorized actor accessed specific folders on the university's H drive, stealing and deleting data to hinder recovery efforts. The J drive, containing departmental files, was also deleted, but no evidence suggests its contents were accessed. MRU will notify affected individuals and provide two years of credit monitoring and identity theft protection services. The investigation is ongoing, with no arrests made yet. The attack disrupted various university systems, including online services and payroll. The Alberta Information and Privacy Commissioner's office and law enforcement are involved in the investigation.

Key Points: • A ransomware attack on Mount Royal University compromised student and staff data. • The attacker accessed and deleted specific folders on the H drive, hindering recovery efforts. • MRU is providing credit monitoring services to affected individuals as a precaution.