York University breach exposes 19 years of student health and financial data
Archived webform submissions from 2007 through October 2026 were taken across 14 faculties, and no group has claimed the attack.
92 stories, newest first · one card per story
Archived webform submissions from 2007 through October 2026 were taken across 14 faculties, and no group has claimed the attack.
New Plymouth took computers and its network offline and plans to resume classes on November 16.
An employee sent eight unredacted files with education and disability data on about 47,000 students.
ThinkYoung says 79% of surveyed students used AI for assignments, while only 47% were shown how.
Hackers exploited a third-party vulnerability to steal personal data of over 3 million students and employees.
Parents of users of an app used by almost 50,000 people were told to watch for unexpected emails or calls.

DuckDuckGo targets schools after Google allows turning off Gemini while keeping other AI features.

Schools rejecting AI must lose Search access entirely; no separate Gemini toggle available.
Schools that block AI lose Google Search, because Google says search and AI features are now inseparable.
Google will disable AI features in K-12 search unless schools opt in, starting early 2027.

Search starts as a U.S. school pilot; Classroom is global today; Gemini and Search stay off until admins opt in.

The company provides credit monitoring for affected adults and dark-web monitoring for minors.
No evidence of PII misuse for fraud or identity theft; passwords were reset and multi-factor authentication continues.

Kaspersky says a human operator used an LLM on the C2 server to pick tools while Go beacons ran commands on compromised hosts.

Securelist says education networks in Africa and Latin America were taken from SQL Server to domain admin in days.
Lab2Sim provides 218 videos and EduVideo2Code improves apparatus fidelity by 24.15 points.
The state learned of the breach on October 19, took the site down, and says aid payments are unaffected.
Unauthorized access to the student financial aid site, found October 19, may have exposed Social Security numbers.
Frontline began notices on October 26 for an August 2026 incident and has not given a nationwide victim count.

In a Boston Globe interview he describes a use-it-or-lose-it cycle and a student outsourcing diagnoses to a bot.
Two preregistered studies found stronger legal-reasoning gains and better mastery of unseen programming problems.
Judge Battaglia kept CMIA and negligence claims alive in an MDL over data on about 50 million students and educators.
A hacktivist obtained 8.3 million tips; Nevada says about 10 percent of SafeVoice tips with PII were exposed.
Hackers reached a test environment, and a later update said PIN codes of another 20,000 staff and students were exposed.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views