University of Regina probing grade 'irregularities' in faculty of engineering

The University of Regina is investigating the possibility that one or more students hacked into its computers in order to adjust grades, confirming a tip received by CBC'siTeam.

Officials are "investigating irregularitiesin the grades of four classes in the Faculty of Engineering," KimMcKechney, associate VP of external relations, wrote in an email.

We are taking this matter very seriously. Kim McKechney, associateVP of external relations

He said the adjustment of grades appears to have happened sometime this summer. He said it was discovered in late August and the university took immediate action.

As part of its normal protocol when dealing with potential computer breaches, the university asked professors in the faculty to change their passwords.

"I don't want to prejudice the investigation in terms of what occurred," McKechneytold CBC News. "But the end user and passwords are typically viewed as the most vulnerableelement in which people can gain unauthorized access so that's of course the first step you take."

Students suspected

The investigation is proceeding on thepossibilitythis breach was done by a student or students, in keeping,McKechneysaid, withthe university's code of conduct governing student behaviour.

"Faculty or staff of the university are not the subject of this investigation, though a few are obviously being contacted as part of the investigatory process,"McKechneywrote.

Some of the affected students have already been notified of the apparentbreach, McKechneysaid.But some who may have been affectedhave not yet been informed of the investigation.

He said he's unable to offer any other details as the investigation is underway.

"We are taking this matter very seriously, so it is critical that we be as thorough and fair as possible," he said.

McKechney said once that investigation is complete, the university will decideif the facts warrant turning thingsover to the police.

Not the first time

This isn't the first time the university has investigated hacking.

In July 2016 it launched an investigation after being targeted by hackers, which raised concerns about the possibility of compromised personal information.

• Hacked computers cause University of Regina privacy breach

The university identified three computers on campus which had been accessed without authorization as a result of two separate cyber attacks.

McKechneysaid Thursday that forensicanalysis conducted by an outside firmconcluded "there was no evidence that any personal or sensitive information was ultimately extracted or disclosed."

However, he did acknowledge that the review identified some "security vulnerabilities that the university has taken some actions on and continues to take action on," including tighter procedures, stronger security software, mandatory security training for some staff, and the hiring of a new IT security worker.