● Covered by 1 source · 1 reportMedium impact1 negative
York University Data Breach Exposes Personal Information from Online Forms Dating to 2007
Key points
- Unauthorized access to online forms discovered October 25.
- Data from 14 university websites, 2007-2026, was exposed.
- Exposed data includes contact, health, financial, and government ID information.
- York University will offer credit monitoring to those with sensitive data exposed.
Breach Details and Discovery
York University in Toronto announced a cybersecurity incident where a threat actor gained unauthorized access to personal information. The breach was discovered on October 25, affecting data submitted through online forms across 14 university websites. The compromised forms contained information dating back to 2007 and extending to 2026.
Types of Exposed Data
The stolen data includes email addresses, phone numbers, dates of birth, York identification numbers, government ID information, third-party contact details, health information, academic history, employment history, financial status, criminal background, demographic details, and photos. The university stated that the specific data types vary per individual, with most records containing basic contact information and York ID numbers.
Potential Risks to Individuals
The exposure of contact information alongside other sensitive data, such as government IDs and financial details, increases the risk of phishing and social engineering attacks for those affected. York University has secured the compromised website forms and confirmed they are now safe for use.
University Response and Notification
York University plans to directly notify individuals whose government ID or financial account information was exposed. These individuals will be offered two years of credit monitoring and identity theft protection coverage. The university has not yet disclosed the total number of individuals impacted by the incident. No information regarding the perpetrators has been released.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
York University confirmed a data breach where an unauthorized actor accessed personal information submitted through online forms on 14 university websites. The breach, discovered on October 25, exposed data including contact details, government IDs, health information, and financial status from forms submitted between 2007 and 2026. The university will notify affected individuals with sensitive data exposed and offer credit monitoring.