York University
Nov 2026 · Graded Attested · Public Sector and Education · Beyond the filings
Incident summary
York UniversityNov 2026
Not yet quantified
AAttestedAn unnamed actor reached personal data submitted through online forms on 14 York University websites, nineteen years of submissions, with the access discovered on October 25. The notice does not say how the actor got in or how many people are affected. Departmental forms gathered health details, criminal backgrounds, and government IDs and kept them since 2007, turning a web form into an archive nobody governed as one. Credit monitoring covers the ID numbers but doesn't cover the senstive information that can never be reissued.
Public Sector and Education
York University breach exposed personal information dating to 2007
Initial attack type not disclosed · Impact data theft confirmed
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.