Published 3 hours ago • loading... • Updated 40 minutes ago
York University Investigating Cybersecurity Incident, Data Theft
York University said some exposed files included academic histories and government IDs, and it is offering two years of credit monitoring to affected people.
On Nov. 08, 2026, York University reported discovering a cybersecurity incident last month that resulted in theft of personal information from online forms used for university business.
An "unauthorized actor" gained access to online forms used by Toronto departments between 2007 and Oct this year, including residence applications and general surveys.
Stolen data included academic histories, contact details, and student identification numbers. The University noted "most of the stolen information is not the type of information associated with an elevated risk of such fraud."
York is offering two years of complimentary TransUnion credit monitoring to people with exposed government or financial information and reported the incident to the Privacy Commissioner in Ontario.
The school recommends reporting any unusual financial activity to the Canadian Anti-Fraud Centre, and urges affected people to remain alert for suspicious emails, texts, or calls.