YORK UNIVERSITY BREACH · CMP-202611-2x23ij · Other
NO FIX YET · SEE WHAT TO DO
York University in Toronto confirmed that attackers stole personal information from departmental web forms. It found the unauthorized access on 25 Oct 2026. The stolen forms were submitted to 14 university websites between 2007 and 2026, so current and former students, staff, applicants and others who filled them in may be affected. Most records hold contact details and York ID numbers. Some also hold date of birth, government ID details, third-party contacts, health, academic, employment and financial status, criminal background, demographics and photos. Number of people affected: not disclosed. Attacker: unknown, and no ransomware group has claimed it. York says the forms are now secure.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
No product ranges from the sources yet.
Posts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.