York University Breach Exposes Data Since 2007

York University confirmed a cybersecurity incident where a threat actor accessed personal information from online forms between 2007 and 2026. The breach exposed email addresses, phone numbers, dates of birth, government IDs, health information, and financial status. The university will notify those with exposed government or financial data and offer two years of credit monitoring coverage.