October 22, 2026
Dear donors and supporters of Canadian Mennonite University,
Thank you for the many ways you support the mission and students of CMU. Trust and transparency are central to any thriving relationship, and it is in this spirit that I am writing to inform you about a cybersecurity incident that has affected certain personal information held by CMU.
As shared in our public notice, CMU became aware on September 18, 2026 that an unauthorized third party had gained access to portions of our IT systems. We immediately activated our incident response plan, engaged external cybersecurity experts, and reported the matter to law enforcement. Our investigation remains ongoing.
As part of that investigation, we have determined that our donor database was not breached. However, some donor information was included in a set of files accessed by the unauthorized party. The affected files relate to donors who made contributions between 2018 and September 2026.
Based on our findings to date, the affected donor information may include:
- Name
- Mailing address
- Email address
- Donation amounts
Importantly, our investigation has found no evidence that banking information, credit card information, or Social Insurance Numbers were compromised through these donor files. In a small number of cases, cheque images and dates of birth were contained within the affected files. The individuals associated with those files have already been contacted directly.
Based on the nature of the information involved and the guidance we have received from our cybersecurity advisors, we do not believe affected donors are currently at risk of identity theft as a result of this incident. At the same time, we understand that any unauthorized access to personal information can be unsettling.
Our donors make possible so much of what happens at CMU. Your generosity supports students, strengthens programs, and advances the mission of this university. We recognize the trust that accompanies every gift, and we are sorry that this incident may cause some anxiety for members of our donor community.
Since discovering the incident, CMU has been working diligently with a team of external experts to investigate what occurred. We remain committed to protecting the information entrusted to us and to communicating openly as our investigation continues. We are grateful to the CMU staff who have worked tirelessly to secure and restore systems, and to the broader CMU community for its patience, understanding, and support throughout this disruption.
If you have questions or concerns, please contact us at advancement
Thank you for your continued support and confidence in the mission of CMU, which you help realize through this place.
Sincerely,
Cheryl Pauls
President
Canadian Mennonite University