Loyalist College confirms personal data accessed in July ransomware attack
Loyalist College in Belleville, Ont., says a ransomware attack discovered on July 9 knocked out core student and staff systems and that an unauthorized third party accessed files containing personal information.
The attack hit in the middle of summer term, suspending online classes and the systems students use to register and pay fees, and it adds to a run of incidents at Canadian post-secondary institutions this year.
What happened
According to the college's incident update page, the systems initially affected included email, on-campus internet, the myLoyalist portal, Canvas, and student registration and fee payment systems. Canvas-based online courses were suspended, while OntarioLearn courses and in-person classes continued and the campus stayed open.
The college said it notified provincial authorities, hired outside experts, and informed legal counsel and insurers. Staff and students had to change passwords at first login after July 17. Online courses resumed July 21, Wi-Fi returned the same day, and the college reported all systems and services restored by July 29.
What was accessed
In an FAQ update on July 29, the college said its investigation "confirmed that an unauthorized third party accessed files containing personal information." Data may involve current and former employees, current and former students and others affiliated with the college. Loyalist said it had not yet determined exactly what information was involved or whose.
Who claimed it
The INC Ransom group posted Loyalist College on its leak site on Aug. 4, according to ransomware.live. The college has not publicly addressed the claim.
What we don't know yet
The college has not said how the attackers got in, whether a ransom was demanded, or whether it will offer credit monitoring. Its update page does not mention a report to Ontario's privacy commissioner.
What to do
Current and former Loyalist students and staff should use unique passwords for college accounts, watch for phishing that references the college or tuition payments, and monitor financial statements until the college completes its review.
