-
Website Security Notice
Posted: October 30, 2025
On October 28, 2025, York’s Information Security team identified that the Schulich website had been compromised and immediately began an investigation. Working closely with Schulich’s IT leadership and the external web provider, the issue was promptly investigated and resolved.
The purpose of this notice is to ensure your awareness of the incident and advise you of next steps. There are no current concerns of compromise to York data or core services at this time.
This incident involved only the Schulich website which was found to be running malicious scripts that redirected some users, not all, either to a malicious website offering a fake version of Google Chrome or to a fake captcha screen.
The maintenance and hosting of Schulich’s website are outsourced and the University has requested a comprehensive investigation and report of the incident from the provider.
We are publishing this notice out of an abundance of caution. We suggest the following actions if you have downloaded and installed the fake version of Chrome or interacted with the fake captcha screen on the website:
- Use antivirus or anti-malware software to scan your computer system for any potential threats
- Consider updating passwords for accounts that might have been exposed
- Monitor all your accounts for any unusual activity or unauthorized access.
We will update this webpage as we become aware of additional information that you might find useful. Should you have other questions regarding this incident please contact the Schulich IST Service Desk via: askit@yorku.ca
