Canada
CAN
Ransomware disrupts Mount Royal University systems and deletes shared storage
Mount Royal University detected a cyber incident on 17 June 2026 that disrupted internal systems, online services and internet access. Attackers accessed the network, exfiltrated data and deleted shared and departmental storage, while payroll, student accommodation registration and other digital services were affected during recovery. CMD Organization later claimed responsibility and a ransom demand, but the claimed volume and demand were not independently verified.
82
Estimated severity
82 / 100
88
Source reliability
88 / 100
Approximate Date
17/06/2026
Targeted Company
MOUNT ROYAL UNIVERSITY
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Canada
Affected countries
Canada
Impacted regions
Calgary · CanadaAlberta · Canada
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
ERP or business system disruptionService unavailabilityService degradationOperational disruptionDownstream customer disruption
Affected sectors
Education & Research
Affected departments
Information TechnologyHuman ResourcesFinance
Attack Profile
Attack types
RansomwareData exfiltrationData destructionUnauthorized access
Attributed threat actors
CMD ORGANIZATION
Sources
Incident Sources
securityweek.comhttps://www.securityweek.com/mount-royal-university-confirms-data-stolen-in-ransomware-attack/thereflector.cahttps://www.thereflector.ca/2026/07/28/mrus-online-services-accessible-following-security-incident/comparitech.comhttps://www.comparitech.com/news/cybercriminals-say-they-hacked-mount-royal-university-demand-ransom/