An external third party gained unauthorized access to a database containing current and former student information, prompting immediate action to secure systems and prevent further compromise.
The department disclosed the incident through an email to parents late Wednesday evening, titled “Message from the Department of Education – Cyber Incident.”
While the breach was confirmed, the department has not disclosed the exact timing of the attack or the precise number of students affected by the unauthorized access.
The compromised data includes student names, school-issued email addresses, school names, and year levels across Victorian government schools across multiple regions, including northern, western, and southeastern Melbourne.
The breach affected both primary and high schools. Notably, the department confirmed that no additional sensitive personal information, such as dates of birth, phone numbers, or home addresses, was accessed during the incident.
According to the department’s investigation, the breach originated from a school network, and both active and former student accounts were compromised.
A school management platform used for family communications was identified as the potential vector for
unauthorized access. The department spokesperson stated that the organization has “identified the point of the breach and put safeguards in place, including the temporary disabling of systems to ensure no further data is able to be accessed.”
Acting Deputy Secretary Stacey Gabriel informed school leaders on
On Wednesday afternoon, all student passwords were reset as a precaution.
This reset will temporarily lock secondary students out of their accounts, though new passwords will be issued at the beginning of term 1, with VCE students prioritized for access restoration.
The department has provided schools with template letters for communicating with parents across different school levels.
The department emphasized that “there is no evidence to suggest that the data accessed has been released publicly or shared with other third parties,” though investigations are ongoing.
Despite these assurances, the department is working with cybersecurity experts and coordinating with other government agencies to manage the incident response and prevent disruption when students return to school later this month.
One affected school advised parents concerned about their child’s school location being known to contact the school directly, Victoria Police, or family violence support service Orange Door, indicating potential safeguarding concerns.
Opposition Leader Jess Wilson has called for greater transparency, demanding that Premier Jacinta Allan confirm the total number of students exposed, specify which sensitive information was compromised, and explain how the breach occurred.
Wilson stated that “families need immediate answers” about the incident, emphasizing parental concerns regarding the adequacy of information released by authorities.
The department continues coordinating with schools to ensure the incident does not disrupt the upcoming academic term, while cyber security experts investigate the full scope of the breach.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
The post Victorian Department of Education Confirms Student Data Breach appeared first on Cyber Security News.
Discover more from RSS Feeds Cloud
Subscribe to get the latest posts sent to your email.
