Now Hacked
EN
Data breach

Personal data stolen from web forms at Canada’s York University

First reported · Last reported · 17 related reports

Personal information submitted through online forms on the websites of 14 departments at Canada’s York University was stolen without authorization. The affected data was collected from 2007 through October 2026 and included contact details, university identification numbers and, for some individuals, government-issued identification information, financial account details, health information and disability information. The university brought in external experts to investigate and reported the incident to the privacy regulator and police, but did not disclose the total number of people affected.

Key facts

Affected organization
York University
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal information from online forms on 14 departmental websites stolen; number of people affected not disclosed
Cause / method
An attacker gained unauthorized access to online form data on departmental websites and stole personal information
Location
Canada

If your data was exposed

Exposed dataBank accountHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. It emerged that government-issued identification information and financial information had been stolen in a cyberattack on York University.
  2. It emerged that the university had brought in external experts to investigate and reported the incident to the privacy regulator and police.

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.