The University of Winnipeg disclosed a troubling cyberattack that targeted its network, unsettling the institution’s operations and deeply concerning its community. The breach, discovered on March 24, culminated in the compromise of a file server, resulting in the likely theft of personal information from both current and former students and employees. This extensive data alteration is suspected to encompass a wide range of personal details, including bank account information, social insurance numbers, compensation information, names, and phone numbers, with implications extending back over two decades.
Furthermore, the affected data is reported to encompass students enrolled in various programs, including undergraduate, graduate, and professional, applied, and continuing education, along with individuals issued T4A tax forms by the university. Amidst the gravity of this breach, the university pledged to offer those impacted a two-year credit monitoring service to detect signs of identity fraud and affirmed its commitment to ongoing investigation, acknowledging the potential for prolonged examination. In a proactive step, law enforcement and the Manitoba Ombudsman were notified, reflecting the dedication to comprehensive scrutiny and transparent, ethical procedures.
This unprecedented cyber incident has unfolded as an appalling disruption to the university community, compelling an extensive call for action and network-wide reassessment amidst the concerning revelations. The university extended its apologies, affirming its obligation to support those affected, encapsulating the paramount significance of comprehensive response measures and collaboration to address the significant aftermath of this alarming development.