The breach occurred within an online code library used by the university for storage and development projects. While the platform was primarily intended for hosting code, it also contained historical data files that were likely used for testing purposes during the development phase. The university confirmed that the unauthorized access was isolated to this specific platform and did not spread to other institutional systems.
Among the data accessed were records for approximately 22,500 staff and affiliates who were employed at the university in September 2018. The information included names, home addresses, phone numbers, birth dates, and basic employment details. This group is comprised of 10,000 current employees and 12,500 former staff members who were active during that period.
GET 50% Discount for VPN/ANTIVIRUS SOFTWARE AT 911Cyber - CODE: bit5025
The incident also impacted roughly 5,000 alumni and students, as well as six supporters of the university. These records date back to a period between 2010 and 2019. The university has stated that it is actively monitoring for any signs that this information has been shared or sold online and has promised to notify those affected immediately if any further risks are identified.
Law enforcement and relevant regulatory authorities have been notified of the attack as the university works with cybersecurity specialists to determine the full scope of the incident. The investigation is described as complex and is expected to continue into early 2026. Experts are currently analyzing the breach to ensure no other vulnerabilities remain within the university’s digital infrastructure.
The university began the process of notifying affected individuals this Thursday and anticipates that all communications will be completed by January 2026. Impacted persons are being provided with guidance on how to protect their identities and monitor for suspicious activity. The institution continues to emphasize that the breach was limited in scope to the single development library.
Source: University Of Sydney Data Breach Impacts 27,000 Individuals
I think I experienced a data breach at my own university (although they haven't acknowledged it as it is their opinion it isn't a data breach till they have evidence the information was shared broadly). Sucks that this is just how it is at Aussie unis now.