University Of Sydney Suffers Data Breach Exposing Student And Staff...
Hackers gained access to an online coding repository belonging to the University of Sydney and stole files with personal information of staff and students.
"Last week, we were alerted to suspicious activity in one of our online IT code libraries. We took immediate action to protect our systems and community by blocking the unauthorised access and securing the environment," reads the announcement.
"While principally used for code storage and development, unfortunately, there were also historical data files in this code library containing personal information about some members of our community."
The personal data stolen in the attack impacts more than 27,000 individuals as follows:
The staff data includes names, dates of birth, phone numbers, home addresses, and job details.
Although the university confirmed that this data was accessed and downloaded, it underlined that it found no evidence that it had been published online or misused.
The University of Sydney is a public university, one of the largest and most important in Australia, with 70,000 students and 10,000 academic and administrative staff.
The educational institute has started informing impacted individuals via personalized notifications today and expects to complete this process by next month.
A dedicated cyber-incident support service has also been established to provide counseling and support for affected individuals. A FAQ page has also been published and will be updated with new information from the investigation in progress.
Affected staff and students are advised to remain vigilant for unsolicited communications requesting additional information, change their online account passwords, and enable multi-factor authentication (MFA) where possible.
Source: BleepingComputer