York University Reports Data Theft in Cybersecurity Incident

Cbc.Ca

York University Reports Data Theft in Cybersecurity Incident

First seen 8 Nov 2026, 18:49 UTC • •55.5

Article Content

1 / 12

Browse articles

ThreatCluster •November 8, 2026 at 21:18 UTC

•Unauthorized access to personal data from online forms at York University.
•Incident discovered on October 25, 2026, affecting data from 2007 to October 2026.
•University offering two years of credit monitoring to affected individuals.

York University announced a cybersecurity incident involving unauthorized access to personal data from online forms, discovered on October 25, 2026. The breach affected information submitted between 2007 and October 2026, including student identification numbers, academic histories, and financial details. The university is notifying directly affected individuals and has begun an investigation with external experts. No evidence has been found indicating that the unauthorized actor accessed other systems beyond the affected websites. York University is offering two years of free credit monitoring and identity theft protection to those impacted. The incident has been reported to law enforcement and the Information and Privacy Commissioner of Ontario. The university urges affected individuals to monitor their financial accounts for suspicious activity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 10h ago How this analysis works

Timeline

2026-10-25

Cybersecurity incident discovered

York University found unauthorized access to personal data from online forms, prompting an investigation.

2026-11-08

Public announcement of data theft

York University publicly confirmed the data theft and the investigation's findings, notifying affected individuals.

More articles in this cluster (11)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

York University

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to York University
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track York University in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What types of data were stolen?

The stolen data includes personal details, student identification numbers, academic histories, and financial information.

How will affected individuals be notified?

York University is directly contacting individuals whose information was compromised.

What should I do if I am affected?

Monitor your financial accounts for unusual activity and consider enrolling in the offered credit monitoring services.

Continue Reading

Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…

GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…