Mount Royal University Confirms Data Stolen in Ransomware Attack

A ransomware attack on Mount Royal University has resulted in the theft of sensitive data, including employee, student, and university information. Hackers gained access to the institution's internal network and deliberately deleted two drives containing the compromised data. The university has confirmed the breach, highlighting the severity of the attack. The incident underscores the growing threat of ransomware attacks on educational institutions, which often possess vast amounts of personal and sensitive data. The attack's specifics, including the malware used and the vulnerabilities exploited, have not been disclosed. However, the deletion of drives suggests a targeted effort to exfiltrate data, rather than simply encrypting it for ransom¹. This incident matters to security practitioners because it demonstrates the evolving tactics of ransomware groups, who are now prioritizing data theft over encryption, making it essential for organizations to reassess their security protocols.