Cyber Incident Victim: Memorial University of Newfoundland
Date:
Dec 2023
Location:
Canada
Summary
Memorial University experienced a cybersecurity incident impacting IT services at its Grenfell Campus, prompting precautionary isolation of affected systems and a temporary shutdown of Marine Institute IT infrastructure. The university initiated security protocols, launched a forensic investigation with external experts, and notified law enforcement, though no evidence of compromise to other campuses was found. An Emergency Operations Centre was activated to coordinate mitigation efforts and minimize disruptions to academic and administrative functions ahead of the upcoming semester. The institution committed to directly informing individuals if their data was affected, while continuing to assess the incident's scope.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Memorial University identified a cybersecurity incident affecting Grenfell Campus in Corner Brook, Newfoundland, with initial detection occurring on Friday, December 29, 2023. The university publicly confirmed the incident in a Sunday, December 31 statement, revealing that security protocols had been implemented to isolate impacted IT systems across Grenfell Campus. As a precautionary containment measure, Memorial's central IT team also disconnected IT services at the unrelated Marine Institute facility, though no evidence suggested its systems were compromised. The university withheld specific technical details regarding the nature of the intrusion, affected systems, or potential data exposure, citing the ongoing investigation. Memorial initiated a forensic examination with external cybersecurity experts and formally notified law enforcement agencies, though no attribution details were disclosed. University representatives emphasized there was no current evidence of impact to IT services or data repositories at other Memorial campuses beyond Grenfell and the precautionary Marine Institute shutdown.
The institution activated its Emergency Operations Centre to coordinate incident response, deploying cross-functional teams to minimize disruptions to academic operations, research activities, and administrative functions ahead of the winter semester's scheduled January 4, 2024 restart. Memorial committed to directly notifying individuals if forensic analysis confirmed unauthorized access to personal information, though no such determinations had been made public during the investigation's early stages. University administrators planned to disseminate additional operational updates to Grenfell faculty, staff, and students before winter term classes resumed, maintaining normal academic schedules despite ongoing system restrictions. Forensic investigators continued working to establish the incident's root cause, intrusion timeline, and full scope of affected systems, with the university acknowledging this process would require extended time due to its complexity. Regular academic operations at Grenfell Campus remained scheduled to recommence on January 4 while recovery efforts continued under controlled security protocols.