Ransomware was behind cyberattack on MUN's Grenfell campus, confirms president
CBC
Memorial University has confirmed that the cyberattack that hit its Grenfell Campus in Corner Brook in December involved ransomware.
The Dec. 29 attack, MUN president Neil Bose told CBC News on Wednesday, encrypted the data on Grenfell's servers and locked out users. Classes were delayed by a week as a result of the attack.
Bose said forensic work done by the university's information technology and external teams, as well as collaboration with the Canadian Centre for Cyber Security, shows no data was compromised. The Grenfell servers are separate from servers in St. John's, both at the main university campus and at the Marine Institute, he added.
"The affected damage was no one could access anything, and none of the data was accessible to us," Bose said Wednesday.
"As soon as it was identified that it was a cyberattack and that data was unavailable … we then took direction from the cybersecurity experts to take us through how to respond, what we should do and so on and so forth. And it's been pretty intense since then, actually."
Ransomware is a type of malicious software designed to block access to a computer system or server until money is paid in order to regain access. Ransomware groups often gain access to servers through tactics like links sent in emails. In some instances, unsuspecting people click a link because the person initiating the attack is masquerading as an official or colleague.
The university told CBC News in an emailed statement that they can't discuss the ransom, as doing so could affect the investigation.
MUN officials were quiet in the days following the attack. Bose said Wednesday the university didn't want to compromise any information in the early days of the investigation.
Sheldon Handcock, an information technology expert based in Gander, speaking to CBC News before MUN agreed to an interview, said the university's initial approach is common practice among affected parties while they investigate attacks and try to shore up potential weaknesses.
The Newfoundland and Labrador government adopted a similar approach after a ransomware attack that affected the provincial health-care system in 2021, when then health minister John Haggie said commenting on the attack could disrupt the investigation.
Bose said elements of the Grenfell server are slowly coming back online and efforts are underway to improve the system. Email systems are up and running, he said, but restoring Internet access in some laboratories is taking longer than anticipated.
"The new system at Grenfell will look somewhat different from the old system in some ways. It's not just a question of, you know, switching the switch and going back to what it was, partly because we have to take the advice of our cybersecurity experts to make sure that what we have going forward is … even more strong than it was," he said.
"We have been planning a process of consolidation of [the three] networks, partly to improve the security aspects of our outreach."
The president of MUN's faculty association, Josh Lepawsky, suggested recently that institutional funding cuts may have had something to do with the cyberattack. Bose dismissed Lepawsky's speculation Wednesday, saying MUN has always prioritized its IT systems.
A Calgary dentist who defrauded five insurance companies over a decade should spend up to three years in prison, the prosecution argued Friday.
B.C. Conservation Officer Service says it has called off its search for a bear responsible for an attack on a group of school children in Bella Coola, B.C. on Nov. 20.
The union president called it a rally for solidarity as Iqaluit Housing Authority employees gathered Friday while negotiations are ongoing between the Nunavut Employees Union and the employer.
The federal government is stoking Quebec separatism by walking back its climate commitments — including in its recent deal with Alberta — Liberal MP and former cabinet minister Steven Guilbeault says.
Four more Alberta MLAs are facing recall petitions organized by their constituents, including the first NDP representative to be caught in the province's ongoing wave of recall efforts.
Frank Gehry, the Canadian-born renegade architect behind some of the world's most recognizable buildings, has died at 96.
Hundreds of P.E.I. parents can't find child-care spaces, especially for infants. The provincial government says expanding those spots remains a top priority — and it recognizes the concern.
An Alberta judge says a referendum proposal on Alberta separating from Canada goes against Charter and and Treaty rights, in a decision given less than 24 hours after the provincial government introduced legislation that would have ended the court proceeding.
The architect of Alberta's politician recall legislation says it was never meant to be used as a political weapon, but as an "ultimate tool of accountability" if a politician engages in illegal or unethical behaviour.
The Government of Saskatchewan has introduced its long-promised involuntary treatment legislation on the final day of the fall sitting.
The Law Society of Ontario has suspended the licence of Deepak Paradkar, one of seven Canadians arrested in connection with alleged drug lord Ryan Wedding’s cocaine smuggling ring.
London Health Sciences Centre (LHSC) is getting rid of unlimited mental health benefits for staff, blaming ballooning costs and former administrators for implementing it without proper due diligence or oversight.
Netflix has agreed to buy Warner Bros. Discovery's TV and film studios and streaming division for $72 billion US, a deal that would hand control of one of Hollywood's most prized and oldest assets to the streaming pioneer that has upended the media industry.