York University has disclosed that it was the victim of a cybersecurity incident in which a threat actor stole personal information submitted by individuals through online forms.
The breach involved sensitive data collected over a significant period, with the compromised records dating back to 2007. The university confirmed that the stolen information was obtained via its digital submission channels.
While the specific details of the data types were not fully elaborated in the initial announcement, the incident highlights the long-term risks associated with retaining personal information in digital formats over many years.
The university has publicly acknowledged the security failure, marking a significant event for the institution’s data protection record.
<small>Source: Bleeping Computer — read the original story there.</small>
