At approximately 6:00 am on Thursday, December 5, 2019, NVIT was hit by a cyberattack known as RYUK. The RYUK malware involved in this attack has the capacity to perform data exfiltration. Given RYUK’s ability for data exfiltration, NVIT believes it necessary to advise current and past students, employees, contractors, and other NVIT stakeholders that personal information including (but not limited to): T4s, T4As and T2202As along with Student Financial Aid and Student Disabilities documentation, employment and service agreements/contracts may have been accessed and potentially shared.
Information normally found on the above-mentioned documentation may include (but is not limited to): names, birthdates, physical and virtual addresses, social insurance numbers, login and password information, and medical information (primarily for students with disability accommodation requests and student loans). Additionally, members of the general public who visit NVIT campuses to access their personal email and undertake other digital activity on NVIT’s computers and networks in the Learning Commons and Library may also have had their personal information breached by way of RYUK. NVIT’s integrated management system (Colleague) was not breached by the RYUK malware.
At this time, NVIT is continuing to restore networks servers and systems. While restoration is in process, NVIT is undertaking a forensic audit in an effort to determine what, if any, personal information was extracted. That said, once the forensic audit is complete, NVIT is cautious as to the ability to confirm or deny with any level of certainty if, and to what extent, personal data was accessed and/or shared.
While NVIT continues to restore its technologies and further assess the potential privacy breach, we strongly encourage all who have visited the Merritt and Burnaby campuses and used technologies while on site for educational, business and personal use to engage in proactive measures to mitigate individual risk. At a minimum, this includes protecting yourself by:
Changing all of your passwords. It is recommended that you change your passwords regularly. This includes your banking accounts, social media accounts, bill accounts, etc.
Creating strong passwords. There are several great tips for creating strong passwords. Click here for 8 helpful tips.
Be cautious when using public networks and public computers. Avoid accessing or storing personal information when using open WIFI or a public computer. Information shared over a public network may not be secure.
Make sure your operating system has the latest updates and security patches. This includes your smartphones and tablets.
Use an antivirus protection program on your personal devices. There are a variety of services available to safeguard your computers.
Stay Alert. Watch for suspicious emails or files. If in doubt, do not click or open.
Shop Safely. Ensure the online store URL has a https at the beginning and check for a padlock icon in the browser bar. This indicates a verified secure website.
Use Multi-Factor Authentication where available.
Keep personal information private. Be careful not to share too many personal details on social media. Keep your profile private so details like address, birthday, etc are not easily found.
Order a free credit report. You can access your credit report for free from Equifax Canada and TransUnion Canada by mail, fax or over the phone. It is recommended to monitor your credit report every six months or so.
Equifax
Credit Report Request Form
1-800-465-7166
www.equifax.com
TransUnion
Consumer Disclosure Request Form (Credit Report Request)
1-800-663-9980
www.transunion.ca
Once NVIT’s systems are fully restored and the forensic audit is complete, likely early 2020, NVIT will send an update to current and past students, employees, contractors and NVIT stakeholders who may have had information exposed. Communications will be sent by way of the last physical address on file. For updates related to the RYUK cyberattack, please visit nvit.ca and/or connect to NVIT’s social media platforms (Facebook, Instagram, Twitter, Snapchat).
The configuration damage caused by the RYUK malware currently prevents use of our phone lines and email. If you are a current or past student, employee, contractor, or NVIT stakeholder wishing to update your physical address information or ask questions please do so by direct messaging NVIT through its social media platforms (Facebook, Instagram, Twitter, Snapchat).
Please be advised that, for this semester only, a temporary email has been set up for students to submit assignments and exams to Academic office. If you & your Instructor have NOT determined a means to submit your work, please email the address below with your work attached. In your email include your instructor's name, course number (ex: ENGL 110)
NOTE: The date and the time of the Gmail inbox will be the date and time of submission provided to your Instructor. Email assignments and final exams to nvit.academictemp@gmail.com
Please note that a temporary email has been set up to assist those that may wish to submit resumes or connect with our human resources. Email: nvithr.temp@gmail.com
Students and Faculty go to http://moodle.nvit.ca to sign in with your last used username and password. Computers for Student use are available in the Learning Commons at BOTH campuses. Tremendous efforts continue as technologies are restored and we encourage learners to check with IT staff on campus for direction as to which systems and networks are available. WIFI is available in the Merritt learning commons and service in Burnaby continues to be in progress.
At approximately 6am on Thursday, December 5, 2019, NVIT was hit by a cyberattack known as RYUK. This has resulted in a major interruption to NVIT's network, including phones, internet and email. NVIT’s IT team, as well as additional support from external partners, is working through the weekend to secure all on-campus work stations, restore the network and investigate the source of the attack.
As we learn details, we will update our staff, faculty and students via NVIT.CA and NVIT’s social media channels.
The RYUK virus appears to only impact computers with a Microsoft Windows Operating system.
NVIT's integrated information system (Student, HR, Finance) Colleague, has not been compromised. Although access to Moodle has been disabled, the Moodle system has not been compromised. Connectivity to Office.com continues to be enabled; however, we recommend you NOT access Office until our network is operational.
At this time, we recommend safeguarding your personal devices. Here are a few tips to do so:
1. When can I access myNVIT, including email?
We are working to restore access and will provide regular updates via NVIT.CA
2. Why was NVIT attacked?
The goal of the RYUK virus is to get businesses and governments to pay ransom to cyber criminals.
3. Has any of my information been compromised?
NVIT’s IT team is investigating the entry point of the virus and scanning our file servers. We will provide any important updates in this regard via NVIT.CA.
4. Will campus be open on Monday?
YES - Campuses and classes will be as usual.
5. How can I submit my final assignments?
If possible, we encourage you to connect directly with your instructor. If not possible, please contact NVIT via social media and we’ll assist.
6. I have an exam on Wednesday but all of my study material is on Moodle. How will I prepare for an exam?
BURNABY campus will have an all campus gathering for students and faculty to connect on Tuesday December 10 at noon in the common area.
MERRITT campus students and faculty are encouraged to connect in person at the Long Night of Procrastination on Tuesday Dec 10 starting at noon in the Learning Commons.
7. How will I know if I can use a computer on campus?
NVIT will be posting updates to NVIT.CA and NVIT social media platforms. Critical updates and information will be sent through the Emergency Notification System.
8. Were all of the workstations infected?
As a precautionary measure, all NVIT workstations will be scanned, wiped and restored as a precautionary measure.
9. Will the final exam schedule change as a result of the network outage?
No planned changes to the schedule.
Final Exam Schedule posted on Social Media
10. Will I have to register for my courses again?
No. NVIT’s student information system was not impacted.
11. Will payroll be delayed?
No. We do not expect any delays or interruptions to payroll.
12. Could my iPad be infected?
No. The virus only attacks Microsoft devices.