The University of Sydney has confirmed that it has been impacted by a third-party data breach, affecting the personal information of some international students and applicants. Here are the key details of the incident:
While the university did not name the third-party responsible for the breach, it stated that this external entity held personal data belonging to “recently applied and enrolled international applicants.”
Data Accessed and action taken
The breach resulted in unauthorized access to the personal data of these international applicants. However, the university clarified that there is currently no evidence to suggest that this information has been misused.
The university is actively working to contact the affected students and applicants. It has also initiated a comprehensive investigation into the breach, although it acknowledges that the process may take some time.The initial findings indicate that the breach has not affected the data of domestic students, staff, alumni, or donors associated with the university.
Notification to Authorities
In addition to addressing the breach internally, the university has reported the incident to relevant cybersecurity authorities and the NSW Privacy Commissioner.This incident highlights the ongoing challenges and importance of safeguarding personal data, especially within educational institutions that handle sensitive student information.
