
约克大学表示,该校于上月发现遭遇了一起网络安全事件,导致个人信息被盗,包括个人联系方式和学生识别号码。
York University says it discovered last month it was subject to a cybersecurity incident that resulted in the theft of personal information, including personal contact details and student identification numbers.
这所位于多伦多的大学在其网站发布的新闻稿中称,“一名未经授权的行为者”获取了该校各部门使用的在线表格的访问权限,涉及时间跨度为2007年至今年10月。新闻稿称,这些表格用于“各类大学业务”,包括住宿申请和一般调查。
"An unauthorized actor" gained access to online forms used by the university's departments ranging from 2007 to October this year, the Toronto institution said in a news release on its website. The forms were used in a "wide variety of university business," including residence applications and general surveys, it said.
约克大学表示,在10月25日发现该事件后迅速采取行动遏制信息泄露,但仍有部分个人信息被盗。该校未披露事件最初发生的时间,也未说明发现盗窃行为距事发过了多久。
York University said it acted quickly to contain the information after the incident was discovered on Oct. 25, but some personal information was stolen. The university did not disclose when the incident first took place nor how long after they discovered the theft.
学校目前正警告可能受影响的人员留意可疑的电子邮件、短信或电话。学校敦促人们监控其金融账户是否有异常活动,并在可能的情况下使用强密码和多因素认证。
The school is now warning people who may be affected to watch out for suspicious emails, texts or phone calls. It urged people to monitor their financial accounts for unusual activity and to use strong passwords and multi-factor authentication when possible.
约克大学表示:“我们认识到这一事件可能令您担忧。我们对此高度重视,并对这些情况深表遗憾。大学致力于从中吸取教训,将继续加强其网络安全防护、事件应对能力以及个人信息保障措施。” 约克大学副发言人亚尼·达戈纳斯表示,受影响的表格与该校的核心系统(如申请系统、人力资源系统或学生系统)无关。
"We recognize that this incident may be concerning to you. We take that seriously and regret these circumstances," York University said. "The University is committed to learning from this incident and will continue to strengthen its cybersecurity posture, incident readiness, and safeguards for personal information." The impacted forms were not tied to the university's primary systems, such as applications, human resources or student systems, said York's deputy spokesperson Yanni Dagonas.
如何判断您是否遭到黑客攻击——以及您可以采取哪些措施保护自己 2023年8月2日 时长 该大学已联系部分受影响人员,包括其“金融账户和政府身份证件信息”遭泄露的人员。
How to know if you've been hacked — and what you can do to protect yourself August 2, 2023 Duration The university contacted some of the people impacted, including those whose "financial account and government identification information" was exposed.

达戈纳斯未透露有多少人的金融账户和政府身份证件信息被盗,仅表示人数很少。
Dagonas did not say how many people's financial account and government identification information was stolen, other than to say it was a small number.
“大学非常重视保护其社区成员隐私和安全的责任,”他说,并补充称,已为各部门的网络表单增加了“响应式安全改进”。
"The university takes its responsibility to protect the privacy and security of its community seriously," he said, adding "responsive security improvements" have been added to the web forms for departments.
被盗数据包括学历记录、国籍、残疾及便利措施状态、电子邮件地址、家庭联系人、财务信息和电话号码。多个部门受到影响,包括难民研究中心、心理学系和研究生院。受影响部门的完整名单及被盗数据类型已列在约克大学网站上。
The stolen data included academic histories, citizenship, disability and accommodation statuses, email addresses, family contacts, financial information and phone numbers. A variety of department's were affected, including the centre for refugee studies, department of psychology and faculty of graduate studies. A full list of affected departments and the kinds of data stolen is listed on the York University website.
达戈纳斯表示,政府身份证件和金融账户信息泄露的人员,获提供两年免费的TransUnion信用监控和身份盗窃保护服务。
People who had government identification and financial account information exposed were offered two years of complimentary TransUnion credit monitoring and identity theft protection, Dagonas said.
学校为部分人员提供信用和身份盗窃保护 发现事件后,约克大学在外部专家协助下展开调查,以了解问题范围并恢复受影响系统。调查未发现证据表明其他信息或系统受到该事件影响。
School provides credit, identity theft protection to some After discovering the incident, York University began an investigation with help from outside experts to understand the scope of the issue and to regain impacted systems. That investigation did not find evidence that other information or systems were affected by the incident.
大学已向警方和安大略省信息与隐私专员专员报告了该事件,预计专员将展开调查。约克大学表示,受盗窃信息影响的人员也可向专员投诉。
The university has reported the incident to police and to the Information and Privacy Commissioner of Ontario, who is expected to open an investigation. York said people affected by the stolen information can also file a complaint with the commissioner.
独家 超过150万条加拿大犯罪举报热线线索泄露,CBC独家调查发现 多伦多大学、安大略艺术设计大学等安大略省高校受Canvas网络入侵影响 “大多数被盗信息并非与此类欺诈风险升高相关的信息类型,”大学表示。“身份欺诈遗憾的是我们每天都要承担的风险。”大学称,任何可疑活动应立即向相关金融机构或服务提供商报告。民众也可向加拿大反欺诈中心和大学报告任何问题。
Exclusive More than 1.5 million Canadian Crime Stoppers tips leaked, CBC exclusive finds U of T, OCAD among Ontario universities impacted by Canvas cyber breach "Most of the stolen information is not the type of information associated with an elevated risk of such fraud," the university said. "Identify fraud is regrettably a risk we all bear every day." It said any suspicious activity should be reported immediately to relevant financial institutions or service providers. People also can report any issues to the Canadian Anti-Fraud Centre and to the university.