MOUNT Royal University (MRU) in Alberta, Canada, suffered a ransomware attack that resulted in the theft and deletion of employee and student data. Discovered on June 17, the attack disrupted internal systems and online services. MRU announced that a ransomware group was responsible, claiming over 10 terabytes of data was stolen, and is demanding a $1.9 million ransom.
The university will offer free identity theft and credit monitoring services for 24 months to affected individuals and has reported the incident to law enforcement and the Alberta Information and Privacy Commissioner. MRU has not disclosed how the breach occurred.