York University confirms data breach affecting personal information since 2007

York University disclosed a cybersecurity incident in which attackers accessed personal data submitted through online forms over nearly two decades. The…

Educational institutions should immediately audit access controls for online forms and legacy data storage systems. Implement permission audits, historical data segmentation, and alerts for unusual access; monitor York University's official communications for specific mitigation guidance.