York University breach exposes 19 years of student health and financial data
Original title: Ca: York University Breach Exposes 19 Years of Student Health and Financial Data
Archived webform submissions from 2007 through October 2026 were taken across 14 faculties, and no group has claimed the attack.
York University confirmed unauthorized theft of personal, medical, and financial records submitted through departmental webforms. An actor exfiltrated archived submissions dating from 2007 through October 2026, spanning 14 faculties, administrative secretariats, and student housing. The compromise was detected on October 25 and the affected form applications were isolated. The university says most stolen data was basic identification and contact information, though some records may include clinical or financial details.
Unconfirmed: No group has claimed the attack, and the intrusion method is not described.
- Detection on October 25 led to isolation of the form applications.
- Stolen records cover online forms from 2007 through October 2026.
- Health data may include diagnosis and treatment; financial data may include income and debts.
- Threat monitors flagged the exposure in cybercrime channels on November 11.
- No group has claimed responsibility.
Impact: Personal, medical, and financial form records stolen
- 1.Consult the university incident FAQ for affected sites and data types.
- Victims
- York University
- Countries
- Canada
From the original article
3 min read at databreaches.netGarrett Cole reports: Toronto’s York University has confirmed a major cybersecurity incident that resulted in the unauthorized theft of sensitive personal, medical, and financial records submitted across departmental webforms over a 19-year span. Disclosed to community members following forensic containment, the breach allowed an unauthorized actor to exfiltrate archived form submissions dating from 2007 through...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.