2026 Cyber incident
Mount Royal University is in the final phase of recovery from the cyber incident identified on June 17, 2026. Most university systems and services have been restored, while investigation and recovery work continues in some areas.
MRU has contained the incident, engaged external cybersecurity and forensic experts, implemented additional security measures and reported the incident to law enforcement and the Office of the Information and Privacy Commissioner of Alberta.
This page provides current information about the incident and investigation, potential impacts to information, notification and supports available to members of the MRU community. It is replacing the Updates and supports page that was the source of information during the active incident.
Current status
Most university systems and services affected by the cyber incident have been restored and regular operational information for students and employees is once again available through mtroyal.ca, MyMRU and other established university channels.
The H and J drives have been restored. The investigation and analysis of information potentially affected by the incident also continues.
For university services and support, please visit the regular sites used prior to the incident, including:
About the cyber incident
MRU identified a cyber incident affecting certain university systems and services on June 17, 2026. The incident involved a ransomware threat actor.
The University took immediate steps to contain the incident, engaged external cybersecurity and forensic experts and initiated a detailed investigation. The incident was also reported to law enforcement and the Office of the Information and Privacy Commissioner of Alberta.
The investigation found that data within certain folders on the University's H drive was accessed and taken by an unauthorized actor. The actor then deleted H drive data in an attempt to impede recovery. MRU's analysis indicates that specific folders were affected rather than the entire H drive.
The threat actor also deleted MRU's J drive, which contains departmental data. There is currently no evidence that J drive data was accessed or copied before it was deleted.
There is currently no evidence that data stored within other affected university systems was accessed or copied.
The investigation remains ongoing. MRU will provide further information as it becomes available, subject to legal, privacy and security considerations.
Information for those affected by the incident
MRU has notified individuals whose H drive folders were identified as having been compromised based on the findings of the investigation to date. Notifications were sent by email or letter. If you received a notification, please review the information provided in your notice and the guidance below on protecting your personal information.
Request information about your H drive
Individuals who received notice that their H drive was affected may request a list of the names of files that were stored in their H drive.
Request your H drive file list.
The University does not monitor the contents of individual H drives and may not be able to determine what personal files individuals chose to store there.
H drive survey for employees
MRU is seeking information from employees about work-related personal information that may have been stored in affected H drives. This information will help the University assess potential privacy impacts and meet its obligations to members of the university community.
Employees who identify work-related personal information that may have been stored in their affected H drive are encouraged to complete the H drive survey. Please refer to the email you received on Sept. 3 from IncidentSupport@mtroyal.ca for more information.
Employees who may have stored research data in their H drive should also contact the Office of Research, Scholarship and Community Engagement at research@mtroyal.ca.
Credit monitoring and identity theft protection
As a precautionary measure, MRU is offering 24 months of complimentary credit monitoring and identity theft protection to all current employees and individuals employed by MRU within the past five years. Eligible individuals received information about the offer and an activation code in their individual notification.
Activation codes must be redeemed by Nov. 30, 2026.
Participation is optional, but MRU encourages eligible individuals to take advantage of the service. If you believe you are eligible but did not receive an offer, contact IncidentSupport@mtroyal.ca. For technical difficulties with the myTrueIdentity® service, contact TransUnion Canada at 1.888.228.4939.
Protecting your information
Based on the information currently available, MRU has reason to believe that information obtained during the incident has been deleted and is no longer in the possession of the individuals responsible for the attack. The University currently assesses the overall risk to affected individuals as low.
MRU continues to monitor the situation and assess potential impacts associated with the exposure of H drive data. Everyone is encouraged to take common-sense precautions to protect their personal information:
- Be cautious of unexpected emails, calls or messages requesting personal information.
- Do not click unfamiliar links or attachments.
- Monitor bank, credit card and other important accounts for unusual activity.
- Use strong, unique passwords and enable multi-factor authentication where possible.
If you experience identity fraud or another issue you believe may be connected to this incident, please report it to IncidentSupport@mtroyal.ca. Include information about why you believe the issue may be connected to the incident, but do not email confidential or sensitive personal information.
Frequently asked questions
What happened?
MRU identified a cyber incident on June 17, 2026, although the investigation indicates that unauthorized activity began earlier.
The incident involved a ransomware threat actor and affected access to a number of university systems and services. Data within certain H drive folders was accessed and taken by the unauthorized actor and H drive data was subsequently deleted. The J drive was also deleted, although there is currently no evidence that J drive data was accessed or copied.
What caused the incident?
The cause of the incident remains under investigation. Once the investigation is complete, the University intends to share information about the incident and responsive measures taken by MRU, subject to legal, privacy and security considerations.
What has MRU done in response?
MRU contained the incident, engaged external cybersecurity and forensic experts, initiated a detailed investigation, implemented additional security measures and notified law enforcement and the Office of the Information and Privacy Commissioner of Alberta.
Is it safe to use university systems?
Yes. Systems have been returned to service in a controlled manner following appropriate validation and security checks.
Was personal information accessed?
The investigation confirmed that data within certain H drive folders was accessed and taken by an unauthorized actor. The H drive was provided to support employees' work and students' academic activities. It was not intended as a repository for personal files, but depending on what individuals chose to store there, affected folders may have contained personal information.
MRU continues to assess what university information may have been stored in affected H drives and whether any resulting privacy impacts require further action.
There is currently no evidence that data stored within other affected university systems was accessed or copied.
What is the H drive?
The H drive is personal file-storage space provided to individual employees and students on an MRU server. It is separate from Google Drive. Individuals who received notice that their H drive was affected can use this form to request a list of filenames that were stored in their H drive.
Were personnel files exposed?
Not to MRU's knowledge. University employee data is stored in systems including Banner, Google Drive and the J drive. There is currently no evidence that data on those systems was accessed or copied. MRU continues to assess what university information about employees may have been stored in affected H drives.
What is the risk to affected individuals?
MRU continues to assess potential impacts associated with the exposure of H drive data.
Based on the information currently available, the University has reason to believe that information obtained during the incident has been deleted and is no longer in the possession of the individuals responsible for the attack. MRU currently assesses the overall risk to affected individuals as low. The University will continue to monitor the situation and will provide updates if that assessment changes.
How will I know if my H drive was affected?
MRU has notified individuals whose H drive folders were identified as having been compromised based on the findings of the investigation to date. Notifications were sent by email or letter.
If you did not receive a notification that your H drive folder was compromised, it means your folder has not been identified as compromised based on the information currently available.
Why did some people receive different notifications?
Notifications are based on individual circumstances and information available through the investigation. Individuals may therefore have received different communications regarding an affected H drive, precautionary credit monitoring or both.
I can't remember what was in my H drive. Can MRU tell me?
If you received notice that your H drive was affected, you can [request a list of filenames] that were stored in the folder.
What do impacted employees need to do now that H drive access has been restored?
Employees who were notified that data from their H drive was accessed during the cyber incident are asked to review the contents of their restored H drive to determine whether it contains work-related personal information.
This includes employees who previously submitted information about their H drive using the Google form.
If you identify work-related personal information, please submit a new report using the H drive survey, even if you submitted a report previously. Refer to the Sept. 3 email from IncidentSupport@mtroyal.ca for the survey link or email IncidentSupport@mtroyal.ca.
If, after a reasonable review, you do not identify any work-related personal information, no further action is required and you do not need to submit a report.
Why am I being asked to review my H drive again?
When employees were first asked to report work-related personal information that may have been stored in their H drive, they did not have access to the drive and had to rely on their recollection.
Now that H drive access has been restored, impacted employees are being asked to review the actual contents of their drive. This will help MRU more accurately assess potential privacy impacts, identify individuals who may need to be notified and meet its legal obligations related to the incident.
What is work-related personal information?
Work-related personal information is personal information contained in files created or used for University-related purposes.
Examples include personal mailing or email addresses, Social Insurance Numbers, student grades, personnel evaluations or other personal information contained in work-related spreadsheets, reports, grade sheets, employment letters, benefits forms or similar records.
The H drive was provided for work purposes, and it was appropriate for employees to store University information there.
I already completed the H drive survey. Do I need to complete it again?
Yes, if you identify work-related personal information after reviewing your restored H drive.
If you previously submitted a report and your review identifies work-related personal information, please submit a new report based on what you can now see in your H drive.
If your review does not identify any work-related personal information, you do not need to submit another report.
What information should I include in my report?
Please be as specific as possible about the information you identify. Reports that describe specific types of records, categories of personal or confidential information, or groups of individuals are more helpful than general statements that a folder may have contained personal or confidential information.
This information will help MRU assess potential privacy impacts and determine whether additional individuals need to be notified.
Can I delete files from my H drive?
Please do not delete work-related data from your H drive at this time.
You may delete your own personal files if you wish. Personal files could include your own banking statements or other confidential information that is not related to the University.
How do I access my H drive?
On a Windows-based computer on campus, ensure an ethernet cable is plugged into your docking station or computer, and your laptop is plugged into your docking station. The Internet Access icon should appear in the lower right corner of your computer screen. Now:
- Open File Explorer.
- Scroll down the left menu and select This PC. The H drive should appear in your list of network drives.
Note: If the H drive doesn’t appear, try restarting your computer again. It may take up to three restarts to restore the drive. If your H drive does not appear after three starts, contact ITS.
For questions about the H drive review, survey or the cyber incident, contact IncidentSupport@mtroyal.ca.
Who is eligible?
MRU is offering 24 months of credit monitoring and identity theft protection to all current employees and individuals employed by the University within the previous five years.
Eligible individuals received enrolment information and an activation code in their individual notification.
Do I have to enrol?
No. Enrolment is optional, but MRU encourages eligible individuals to take advantage of the complimentary service.
Activation codes must be redeemed by Nov. 30, 2026.
Why is credit monitoring not being offered to students?
Credit monitoring is intended to address the risk of identity theft and financial fraud. Based on the information currently available, that risk is primarily associated with the potential exposure of university data about employees. The student information identified to date does not present the same risk profile.
If you have questions specifically related to the cyber incident after reviewing the information on this page, contact IncidentSupport@mtroyal.ca.
Please include only information relevant to your request. Do not send confidential or sensitive personal information by email, including your student or employee ID number, Social Insurance Number, date of birth, banking information, passwords or other credentials. If additional information is required, MRU will provide instructions for submitting it securely.
For questions about regular university services or operations, please use the appropriate university service or department rather than Incident Support.
MRU provided regular updates to students, employees and the broader community throughout the response and recovery from the June 2026 cyber incident. Significant previous updates and information about the University's response are available for reference.
This content is retained for archival purposes only. Call-to-action links may no longer be active.
Investigation findings July 7
We recognize that the recent cyber incident has been concerning for many members of our community. We are sharing this information to provide an important update on the University's ongoing investigation, share what we have learned to date, and outline the next steps we are taking to notify and support those affected.
Technical teams and external cybersecurity experts continue their investigation and recovery efforts.
Investigation update
On June 18, 2026, we advised our community that we were responding to a cyber incident affecting access to certain university systems and services. At that time, we said the investigation was in its early stages and that if the investigation determined information had been affected, impacted individuals would be notified as appropriate.
H Drive findings
We regret to inform our community that our investigation has now shown that data within certain folders on the University’s "H drive" was accessed and taken by an unauthorized actor. The actor then deleted our H drive data to impede our recovery.
The H drive is a file storage system used by individual employees and students. Our analysis indicates that this incident affected specific folders rather than the entire H drive. We will begin directly notifying employees and students whose H drive folders were compromised within the coming week.
Credit monitoring and identity theft protection
While our analysis of the exposed H drive data is ongoing, we will provide all current employees and all individuals employed within the past five years with two years of credit monitoring and identity theft protection services as a precautionary measure. Details about how to access this offer will be provided by email and physical mail within the coming week.
J Drive findings
The threat actor also deleted MRU’s “J drive,” which contains departmental data. There is currently no evidence that J drive data was accessed or copied before it was deleted. We are still working to recover deleted J drive data, but a full recovery may not be possible.
Ongoing investigation
Further analysis of the affected data and recoverability will take additional time and may be several weeks or months. Updates will be provided as they become available.
Reporting the incident
We have reported this incident to the Alberta Information and Privacy Commissioner and to law enforcement and will provide our full co-operation with their inquiries.
Moving forward
We recognize this may cause concern and uncertainty about personal privacy and the loss of work, and we sincerely apologize. The continued targeting of the public and education sectors by cyber criminals is of great concern. We will work closely with our community to move forward together and return to the services and activities that support our teaching, learning and work.
Questions
We have created a frequently asked questions (FAQ) resource that provides additional information about the cyber incident, the investigation and the supports available. We encourage you to review the FAQs, as they will be updated as new information becomes available. If you have questions after reviewing the FAQs, please direct them to IncidentSupport@mtroyal.ca.
To help us process your inquiry, please only include information relevant to your request. There is no need to provide confidential or sensitive personal information in your email, such as your student or employee ID number, Social Insurance Number (SIN), date of birth, banking information, passwords or other personal credentials. If additional information is required to assist you, we will contact you with further instructions.
We remain committed to providing updates as our investigation progresses and additional information becomes available.
Past updates
Update, Aug. 31
For employees
Payroll information for Sept. 1 pay
Find information about what to expect on your Sept. 1 pay, including retroactive pay and timesheets, salary increases, the Reconciling Advance on your pay stub and updated leave balances. You must be signed into your mtroyal.ca account on your browser to access this resource. Learn more.
Office 365 and FAR sign-in change
The way you sign in to Office 365 and FAR has changed. You can now use your MRU email password to access both systems. If you have been unable to sign in using your previous credentials, please try again using your updated @mtroyal.ca password.
Teaching this fall? Do a tech check
Before your first class, please check the technology in your classroom or lab and confirm you can access the systems, software and files you need for teaching. See Getting ready to teach in Return to campus: What you need to do for what to check and how to report issues.
Printing
Network printers are now working for employees, as is scanning to email. Scanning to the network is not yet available. If you are unable to print or scan to email, submit a ticket through the ITS Service Desk portal.
Remote access to applications
Banner, Argos, FAST, Titanium and other campus based applications can be accessed remotely through the Mount Royal University Virtual Private Network (VPN) Portal. This access does not require you to remote-in to your desktop and is available to all MRU employees. Which applications you have access to depends upon your role. Refer to the quick reference guide, “Accessing internal webpages and web based applications remotely” for details. Note: Webfiles (which allows you to access files stored on the server) currently displays a blank folder list as drive permissions are not yet configured.
For students
MyMRU
As a reminder, MyMRU is available to access the online services you need for the semester, including registering for courses, making payments and requesting confirmation of enrolment. For a step-by-step walkthrough of My Schedule Builder, watch this video. You can adjust your Fall 2026 registration through Sept. 14.
Registering for courses and planning your schedule
Find everything you need to choose your courses, plan your schedule and register at mru.ca/Registration. To register for your courses, you can use My Schedule Builder or the Registration Landing Page (MyMRU>Register & Pay> Registration Landing Page). For a step-by-step walkthrough, watch this video. You can adjust your
Fall 2026 registration through Sept.14.
For visitors to campus
Eduroam available
Eduroam, which provides secure connectivity to visitors from other academic institutions, is available once again.
Update, Aug. 13
For employees: Exception hours due Aug. 15
A reminder that exception hours for pay periods 13-15 must be submitted by Saturday, Aug. 15. (This covers from June 14 through July 25). Learn more, including the latest payroll information, including upcoming pay dates and when to expect leave balances, salary increases and overtime payments to be updated or processed.
Logging in on campus
Some users are reporting issues logging into computers connected to MRSecure. If you encounter this, please turn the device off and restart it.
WiFi
MROpen has now been decommissioned. Please use MRSecure or MRVisitor.
VPN
Global Protect VPN is available.
Update, Aug. 10
Campus WiFi
MRvisitor is live. Please ask campus visitors to use MRvisitor going forward as MRopen will be decommissioned shortly.
Infosilem is now live.
Argos reporting is now live.
Update, Aug. 4
Registration for Continuing Education is now fully operational and can accept payments.
Update, July 31
The CMS (Cascade) is now fully functional. Mtroyal.ca can now be edited and changes published appear on the website.
Update, July 30
Service requests can once again be submitted through Frontline. Use your MRU login credentials with your new password to gain access. If you have not yet changed your MRU email password, visit the IT Service Desk to do so.
OneCards can now be printed. If you are a new employee and have been waiting for your OneCard, please visit the Cougars Campus Store.
Update, July 29
It was previously reported that all H drives were deleted. We are now actively recovering the data on these drives.
To see if your H drive has been recovered when using a PC:
- Ensure an ethernet cable (it looks like a phone plug) is plugged into your docking station or computer, and your laptop is plugged into your docking station. The Internet Access icon should appear in the lower right corner of your computer screen.
- Restart the computer.
- Open File Explorer.
- Scroll down the left menu and select This PC. The H drive should appear in your list of network drives.
If the H drive doesn’t appear, try restarting your computer again. It may take up to three restarts to restore the drive.
Update, July 28
As we are a Payment Card Industry (PCI) compliant institution, the safeguards that we have in place ensured that our campus payment card environment was never compromised during the cyber incident. However, the network outage prevented the acceptance of payment cards at some campus locations. With the exception of Continuing Education, that functionality has now been restored campus-wide. You can use your payment card safely and securely to make purchases on campus as you did before.
Shortened web addresses that begin with mru.ca are working again, such as mru.ca/Apply or mru.ca/Events. The tool for submitting events to the MRU Events Calendar is also back online.
Update, July 27
As we continue to restore services, voicemail email notifications are now being sent from the MRU desk phone system. Jabber is also now available.
Update, July 24
MyMRU is now up and running. We may experience intermittent disruptions with a large volume of users initially. If you are unable to log in, are bumped out or if a specific area is not working, please try again at a later time. Please note that some links on mymru.ca may not work.
Students can now safely access MyMRU to register for courses, make payments, request transcripts and request confirmation of enrolment status. Fall and Winter semester registrations remain in place, and final grades from previously taken courses remain as recorded. To access MyMRU, credit students must first update their MRU account by either activating it or resetting their password. Please check your July 24 email (MyMRU Restoration Update) for details.
Employees can now access information and functions within MyMRU, including Human Resources and Finance. This does not include timesheets for now. Please watch for updates from Payroll regarding the transition back to electronic timesheets.
MRsecure is now live, secured and fully functional. All employees should disconnect from MRopen and connect to MRsecure.
Single sign-on (SSO) is now functional. It simplifies logging into campus applications by using one central login. If there is an online campus service that you normally access through SSO, it may now be available.
Update, July 22
The campus OneCard can now be used for payment at the Cougars Campus Store, Document Services, Tim Hortons, Barrow Coffee Roasters and Jugo Juice.
Wellness’s scheduler is now working, allowing counsellors to follow up with their clients.
For employees: H drive survey FAQs
The University has asked employees with affected H drives to complete a survey. The purpose of the survey is to help the University understand what categories of information may have been stored in affected H drives. See the Guidance for employees section on this page for more details.
Update, July 20
For employees: Payroll update
The same temporary payroll processes used successfully for the July 7 and 21 pay dates will be used again for the Aug. 4 pay date. For details, including payroll timelines, reporting hours and employee actions, please see the updated payroll information in the Human Resources document on the For Employees page.
Update, July 15
The H drive is your personal file storage space, used by individual employees and students, on a University server. It is not connected to Google Drive.
Prior to the cyber incident, it could be accessed on Windows-based computers through File Explorer under This PC. The H drive could only be accessed while on campus, by remotely connecting to your desktop through a VPN, or by using WebFiles.
The University provides the H drive to support employees’ work and students’ academics. It is not meant to be a repository for personal information, but depending on what individuals chose to store in the folder, it may contain personal information.
At this time, we are unable to confirm whether any specific document or record was contained within an affected H drive folder. The types of information involved vary depending on the contents of individual folders, and the University's analysis is ongoing. If additional information becomes available that affects you, the University will contact you directly.
Update, July 6
For employees: Payroll update
The same temporary payroll processes used successfully for the July 7 pay date will be used again for the July 21 pay date. For details, including payroll timelines, reporting hours and employee actions, please see the updated payroll information in the Human Resources document on the For Employees page.
For students: Accommodation information
Visit the For Students page for an update from Access and Inclusion Services, including registering for academic accommodations for the Fall Semester and meeting with access advisors.
Update, July 3
For students: Summer Semester
Find answers to your questions on Summer Semester on the For Students page.
For employees: Finance
Visit the Finance section on the For Employees page for temporary processes and the latest information.
Careers
Visit the Human Resources section on the Contact page for information on careers at Mount Royal, including answers to frequently asked questions.
Update, July 2
As recovery efforts continue, the Mount Royal University website is gradually coming back online. While some webpages are now available, the website is not yet fully functional. Some links, forms and online services may be unavailable or not work as expected while systems continue to be restored.
Services that rely on university systems, including registration, tuition and fee payments, and other online transactions, are not yet available.
We are restoring services carefully and in phases to help ensure the security and stability of university systems. Please continue to visit this Updates page for the latest information on service availability.
For students: Summer Semester
Find answers to your questions on Summer Semester on the For Students page.
Early Support is here for students. Learn more on the Contact page, including a form for self-referral and a form for employee referral.
For employees: Finance
Visit the Finance section of the For Employees page for temporary processes and the latest information.
For students: Get answers to your questions
Find the latest information and temporary processes on the For Students page, including status updates about applications, tuition deposit payments and transcript requests.
Update, June 29
For students: Continuing Education, Conservatory and TVP
Visit the Continuing Education, Conservatory and Transitional Vocational Student Updates and FAQs document for the latest program-specific information, temporary processes and frequently asked questions. It will be updated regularly, so check back often for the latest information.
Summer hours at the Cougars Campus Store begin July 2. Printing services for students and staff are available, among other resources. Learn more.
For employees: Printing on campus
Document Services is operating and providing service to employees on campus, with some new processes and temporary limitations. Learn more.
Update, June 26
Employees, more information and resources have been added to the ITS and Human Resources sections of the For Employees page.
Access the latest information related to Library services and supports. You can also find answers on the Library on the FAQ page.
Timesheets due on Saturday
As Mount Royal University continues its recovery efforts, Human Resources and Payroll have developed temporary processes to support payroll administration while systems remain unavailable. Learn more.
Staying informed: Main phone line
The message on MRU’s main phone line, 403.440.6111, now directs callers to this Updates page for the latest on university operations and service availability.
Update, June 25
A new For Employees page is the central hub for employees to access important information, resources and temporary processes while University systems and services continue to be restored following the cyber incident.
More information and resources were added to the ITS and Human Resources sections of the For Employees page on the afternoon of Thursday, June 25.
Resources from areas such as Human Resources, Information Technology Services and other departments will be added and updated as information becomes available. For department-specific contact information, visit the Contact Information page.
Payroll information
As Mount Royal University continues its recovery efforts, Human Resources and Payroll have developed temporary processes to support payroll administration while systems remain unavailable. Learn more.
Salaried/regular employees who report exception time (e.g., vacation, sick leave, overtime, etc.) should continue to work with their leader and keep records of any time taken or worked. This time will be processed once our systems return.
Casual and Flexible employees, including Research Assistants, should continue to accurately track their hours worked and follow instructions provided by their leader.
Update, June 24
The For Students page continues to bring together student-specific information, including updates related to registration, financial aid, student services and other resources. Additional information is being added as it becomes available, so check back regularly.
Employees are encouraged to continue working remotely where operationally feasible and as directed by their leader. Additional operational guidance will continue to be shared as information becomes available.
The Contacts page has been updated with additional temporary contact information for university services. As more services establish temporary contact methods, this page will continue to be expanded and updated.
Environmental Health and Safety (EHS) contact information and safety resources have been added to the Contacts page to support employees and departments while regular systems remain unavailable.
June 22, 3:30 p.m.
To help students and employees navigate ongoing service disruptions, we have added new resources to this page, including:
For Students: Information on student services, registration, financial aid and other student-related updates.
Contacts: Temporary phone numbers, contact information and alternative ways to access university services while regular systems remain unavailable.
These pages will continue to evolve as additional information, services and temporary processes become available. We encourage you to check back regularly for the latest updates.
Thank you for your patience and understanding as recovery efforts continue.
June 19, 8 a.m.
As Mount Royal University continues to respond to the cyber incident affecting our systems and services, a new public wireless internet network is available across campus to help students, employees and visitors access available services, including Google services such as Gmail, Drive, Meet and Gemini.
Information Technology Services (ITS) has established this temporary network to provide internet access while restoration efforts continue. The University continues to experience disruptions affecting mtroyal.ca, MyMRU, telephone services and other systems. ITS remains focused on restoring affected services as quickly and safely as possible.
How to connect
To access the public wireless network:
- Network name (SSID): MRopen
- Password: None required
- Eligible users: Everyone on campus can use this network.
Security reminder
MRopen is an open public network and you don’t need a password to connect. As with any public WiFi network, avoid accessing sensitive personal information, such as online banking, while connected. If available, consider using a VPN for an additional layer of security.
We appreciate your patience and flexibility as restoration efforts continue.
June 18, 3 p.m.
Mount Royal University is responding to a cyber incident that has affected access to University systems and services.
On Wednesday, June 17, the University advised the community that it was experiencing technical disruptions affecting certain systems. We can now confirm that those disruptions are the result of a cyber incident.
When the issue was identified, the University took prompt steps to contain the threat and protect its systems. We have retained external cyber security experts to assist with the response and investigation, and we are following our established incident response protocols. We have reported this incident to law enforcement.
The investigation is still in its early stages. At this time, we have not determined whether any personal information or other data was accessed or taken. If the investigation determines that information has been affected, we will notify impacted individuals as appropriate.
Campus safety systems, including the fire detection and alarm system, continue to operate.
If you require emergency assistance or need to contact Security Services while campus phone services are unavailable, call 403.585.6764. Please reserve this number for safety and security-related matters. To report facilities-related emergencies, please call 403.827.0103.
Students should attend their exams as scheduled unless they have been notified otherwise by their instructor or department. As students may not be able to access their exam schedule through MyMRU, they can visit the Office of the Registrar in person (A101), email examscheduling@mtroyal.ca, or call 403.440.3435 between 8:30 a.m. and 4:30 p.m. to confirm exam locations, dates, and times. Students can also contact their instructors with questions.
Students who need to review their exam schedule can visit the Office of the Registrar in person (A101), email examscheduling@mtroyal.ca, or call 403.440.3435 between 8:30 a.m. and 4:30 p.m. to confirm exam locations, dates and times.
Students that have exam accommodations can work with Access and Inclusion Services to understand how their individual exam is impacted. Contact the Accommodated Exam Centre at examsais@mtroyal.ca.
Given the nature of the disruption and the challenges it may create for some on-campus work, those who are able to work remotely are encouraged to discuss arrangements with their leader, where operationally feasible and appropriate for their role.
Health Services remains open to provide care. For the time being, please contact them at 403.617.3242. The Injury and Prevention Clinic is operating as usual. To access MRU’s Employee Family Assistance Programs, please phone 1.833.707.4747.
What’s next
We recognize that this situation is disruptive and concerning. The University’s priority is to contain the incident, restore services safely and understand what occurred. That work must be done carefully and may take time.
We ask members of the community to follow official University instructions, avoid speculation, and continue to use approved channels for information and support.
Further information will be posted on this page as it becomes available. Students and employees should also monitor official University channels for instructions
Thank you for your patience and understanding as we work through this matter.
June 17, 4:30 p.m.
On behalf of Dr. Chad London, provost and vice-president, academic, and Michael Lam, vice-president, Finance and Administration.
Before providing an update, we want to thank everyone across our campus community for their patience, flexibility and resilience today as we navigate the service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services.
This disruption has created challenges for students and employees alike. We appreciate the understanding and adaptability our community has demonstrated throughout the day.
Mount Royal University will remain open tomorrow, Thursday, June 18. Information Technology Services (ITS) continues to work to restore services affected by the ongoing disruption. While some systems remain unavailable, university leadership has determined that campus can continue to operate safely.
Students should attend their exams as scheduled unless they have been notified otherwise by their instructor or department. As students may not be able to access their exam schedule through MyMRU, they can visit the Office of the Registrar in person (A101), email examscheduling@mtroyal.ca, or call 403.440.3435 between 8:30 a.m. and 4:30 p.m. to confirm exam locations, dates, and times. Students can also contact their instructors with questions.
Employees may continue to experience disruptions accessing university systems and services. Those who are able to work remotely are encouraged to discuss arrangements with their leader, where operationally feasible and appropriate for their role.
We appreciate the patience, flexibility and support of our community as teams work to restore normal operations.
Please continue to monitor this page and the MRU Now app for the latest information.
Thank you for your understanding and co-operation.
June 17, 2 p.m.
Mount Royal University continues to experience a service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services. Google services, including Gmail, remain available.
Information Technology Services (ITS) continues to investigate and work towards restoring services as quickly as possible. At this time, there is no significant change to report.
Campus remains open and all on-campus security and safety systems, including the fire detection/alarm system, are operating normally.
If you require emergency assistance or need to contact Security Services while campus phone lines are unavailable, call 403.585.6764. Please reserve this number for safety and security-related matters.
We recognize these disruptions are affecting access to university services and campus activities. We appreciate the flexibility and understanding of the Mount Royal community as we work through this situation.
Updates will be shared on this webpage and through the MRU Now app. The next update will be provided no later than 4 p.m., even if there is no significant change to report.
Again, thank you for your patience, co-operation and understanding as we work through this situation.
June 17, 1 p.m.
Mount Royal University continues to experience a service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services. Google services, including Gmail, remain available.
Information Technology Services (ITS) continues to investigate and work towards restoring services as quickly as possible. At this time, there is no significant change to report.
Campus remains open and all on-campus security and safety systems, including the fire detection/alarm system, are operating normally.
If you require emergency assistance or need to contact Security Services while campus phone lines are unavailable, call 403.585.6764. Please reserve this number for safety and security-related matters.
We recognize these disruptions are affecting access to university services and campus activities. We appreciate the flexibility and understanding of the Mount Royal community as we work through this situation.
Updates will be shared on this webpage and through the MRU Now app. The next update will be provided no later than 2 p.m., even if there is no significant change to report.
Again, thank you for your patience, co-operation and understanding as we work through this situation.
June 17, 11:15 a.m.
Mount Royal University continues to experience a service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services. Google services, including Gmail, remain available.
Information Technology Servic es (ITS) continues to investigate the disruptions and work to restore services as quickly as possible. Teams are actively assessing affected systems and prioritizing service restoration. At this time, there is no significant change to report.
Campus remains open and all on-campus security and safety systems, such as the fire detection/alarm system, are operating normally.
If you need to contact Security Services while campus phone lines are unavailable, call 403.585.6764.
We recognize these disruptions are affecting access to university services and campus activities. We appreciate the flexibility and understanding of the Mount Royal community as we work through this situation.
Updates will be shared on this webpage and through the MRU Now app. The next update will be provided no later than 1 p.m., even if there is no significant change to report.
Again, thank you for your patience, co-operation and understanding as we work through this situation.
June 17, 10:55 a.m.
Mount Royal University continues to experience a service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services. Google services, including Gmail, remain available.
Campus remains open and all on-campus security and safety systems, such as the fire detection/alarm system, are operating normally.
If you need to contact Security Services while campus phone lines are unavailable, call 403.585.6764.
Information Technology Services (ITS) is investigating the disruptions and working to restore services as quickly as possible. You may experience disruptions accessing university services and systems.
The next update will be provided no later than 11:15 a.m., even if there is no significant change to report.
Thank you for your patience, co-operation and understanding as we work through this situation.
June 17, 10:20 a.m.
Mount Royal University continues to experience a service disruption affecting mtroyal.ca, MyMRU, on-campus internet access, telephone services and other services. Google services, including Gmail, remain available.
At this time, campus remains open. All on-campus security and safety systems, such as the fire detection/alarm system, are functioning.
Information Technology Services (ITS) is investigating the disruptions and working to restore services as quickly as possible. You may experience disruptions accessing university services and systems.
The next update will be provided no later than 11:15 a.m., even if there is no significant change to report.
Thank you for your patience, co-operation and understanding as we work through this situation.
June 17, 8:15 a.m.
Mount Royal University is investigating disruptions affecting mtroyal.ca, MyMRU, on-campus internet access and phone services. Google services, including Gmail, remain available at this time.
ITS is investigating.
Updates will be posted here as more information becomes available, particularly if mtroyal.ca remains unavailable.
To receive emergency notifications and service updates directly to your mobile device, download the MRU Now app. Ensure notifications are enabled on your mobile device.