2026 Mount Royal University — H-drive data stolen and deleted; CMD Organization extortion (Jun)

Verified data breach — attack discovered June 17, 2026. Mount Royal University in Calgary confirmed that an unauthorized actor accessed and took data from certain folders on the university H drive used for student and employee file storage, then deleted the originals to impede recovery. A separate J drive storing departmental data was wiped; MRU said there is currently no evidence J-drive files were copied before deletion. Affected H-drive material may relate to current and former students, employees, and other individuals, with exposure varying by person; determining exact impact is complicated because originals were deleted. The CMD Organization extortion group claimed the attack, published sample passport scans, and demanded a 30 BTC ransom with a six-day deadline. MRU reported the incident to Alberta's Information and Privacy Commissioner and law enforcement, and is offering two years of credit monitoring to current employees and anyone employed in the past five years. Initial June 19 coverage had described operational disruption (website, MyMRU, campus internet, telephony) without confirming exfiltration; July 8 updates confirmed data theft. BreachHistory indexes recordsAffected 0 pending a regulator or university headcount.