York University breach exposed personal data from forms dating to 2007
Original title: York University breach exposed personal information dating to 2007
Forms on 14 sites held emails, government IDs, health and financial data; the number of people affected is unknown.
York University in Toronto confirmed that an unauthorized actor accessed limited online forms and stole personal information. The access, discovered on October 25, covered forms submitted on 14 university websites between 2007 and 2026. Exposed fields vary by person and can include contact details, York IDs, government ID, health, academic, employment, financial, criminal-background and demographic data. The university says the forms are now secure, will notify people whose government ID or financial account data was exposed, and will offer two years of credit monitoring.
Unconfirmed: The number of affected people and how the actor accessed the forms are not stated.
- Most stolen records contained basic contact information and York ID numbers.
- York has more than 55,700 students and 7,000 administrative staff.
- No perpetrator has been named, and no ransomware group had claimed the attack.
- People not notified can contact the university about their exposed data types.
Impact: theft of personal, health, financial and government ID data
- 1.Watch for phishing that uses exposed contact and identity details.
- 2.Contact York University if you were not notified about exposed data.
- Victims
- York University
- Countries
- Canada
From the original article
2 min read at bleepingcomputer.com
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.