The personal information of current and prospective students of Xavier College has been threatened to be published online after a cyberattack, the school says.<\/p>\n
The hack took place in June, but the school waited until this week to inform the families after it deemed that the number of people whose information had been stolen was much greater than it first thought.<\/p>\n
<\/p>\n
A hacker who accessed sensitive data at Catholic boys\u2019 school Xavier College is threatening to publicly release the information.<\/span>Credit:<\/span>Eddie Jim<\/cite><\/p>\n The Catholic boys\u2019 college said that when a key administrative staff member was hacked four months ago, it believed just 45 students were exposed, but it confirmed on Tuesday that more than 100 students had sensitive information, including birth certificates, visa applications, parenting arrangements and financial information, stolen.<\/p>\n The college said it initially kept the security breach secret from the wider school community because it had no evidence the stolen data would be misused or publicly disclosed.<\/p>\n \u201cThen, in late October, it came to our attention that an unauthorised third party may disclose details of these mailbox contents,\u201d a school spokesman said.<\/p>\n \u201cThe college has now taken steps to re-assess the original data and re-evaluate the risk parameters to consider whether any further individuals have been affected.<\/p>\n \u201cAs we did in June, immediate notification to specific individuals is occurring, while our wider school community has also been informed. The college network, learning and database systems remain secure.\u201d<\/p>\n Members of the school community received a warning on Tuesday that their information might have been compromised, with the hacker gaining access to an email account that includes information relating to students\u2019 and families\u2019 finances, admissions, fundraising, scholarships, pastoral care and \u2013 for a small cohort of individuals \u2013 health information.<\/p>\n Information such as birth certificates can be used to open a line of credit or conduct fraudulent transactions, the school said.<\/p>\n \u201cWhen the college initially became aware of the incident, we had no evidence to suggest that the contents of the email account would be misused or publicly disclosed,\u201d the letter says.<\/p>\n \u201cNotwithstanding this, in July 2022 we provided precautionary notifications to 45 individuals whose at-risk personal information was located in the email account.<\/p>\n \u201cBased on the recent threat of data disclosure, we have expanded the scope of our assessment to identify whether there was any other information located in the email account that related to our students, staff or broader community.\u201d<\/p>\n Xavier students are not the first to be exposed to a data breach this year.<\/p>\n Early this month, it emerged that technology company PNORS, which works with six different state departments including the Department of Education and Training, had been hacked, potentially exposing the personal data of thousands of students.<\/p>\n The Xavier hack was reported to the Office of the Australian Information Commissioner and the Australian Cyber Security Centre in June, the college said.<\/p>\n The Morning Edition newsletter is our guide to the day\u2019s most important and interesting stories, analysis and insights. <\/i><\/b>Sign up here<\/i><\/b>.<\/i><\/b><\/p>\nMost Viewed in National<\/h2>\n
From our partners<\/h3>\n