Now Hacked
EN-GB
Data breach

Personal data stolen from web forms at Canada’s York University

First reported · Last reported · 17 related reports

Personal information submitted through online forms on the websites of 14 departments at Canada’s York University was stolen without authorisation. The affected data was collected from 2007 to October 2026 and included contact details, university identification numbers and, for some individuals, government-issued identification information, financial account details, health information and disability information. The university engaged external experts to investigate and reported the incident to the privacy regulator and police, but did not disclose the total number of people affected.

Key facts

Affected organisation
York University
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal information from online forms on 14 departmental websites stolen; number of people affected undisclosed
Cause / method
An attacker gained unauthorised access to online form data on departmental websites and stole personal information
Location
Canada

If your data was exposed

Exposed dataBank accountHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. It emerged that government-issued identification information and financial information had been stolen in a cyber-attack on York University.
  2. It emerged that the university had engaged external experts to investigate and reported the incident to the privacy regulator and police.

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.