A significant data breach impacting the networks of approximately 1700 government schools in Victoria has left families, particularly those fleeing domestic violence, fearing for their safety. The cyber attack, which was confirmed on Wednesday, accessed sensitive student information, creating a potential avenue for perpetrators to track victims.
What Data Was Compromised?
The breach saw an external third party access the names of students, their schools, year levels, email addresses, and encrypted passwords. The attack involved all state government schools, though the exact number of current and former students affected remains unclear.
Importantly, the Victorian Education Department stated that birth dates, home addresses, phone numbers, and staff details were not accessed in this incident. The department moved to secure its systems before notifying schools and parents, and has temporarily disabled certain systems to prevent further data access.
A Child Safety Crisis, Not Just an IT Problem
For families impacted by domestic violence, the exposure of a child's school details is terrifying. One mother told 7NEWS she was "a bit terrified" that her child's information could be traced back, putting them in harm's way. She expressed the chilling possibility that an ex-partner could use the data to monitor school pick-ups and follow her home.
Cyber safety expert Ross Bark emphasised the gravity of the situation, stating, "This isn't an IT issue, it's a child safety issue and we need to treat it that way." He warned that criminals often sit on stolen data and could exploit it years later when children become adults. Bark also stressed the importance of students being vigilant for fake emails, especially those waiting for Year 12 results.
Government Response and Ongoing Concerns
The Education Department has referred the attack to federal authorities and maintains there is no evidence the accessed data has been released publicly or shared with other third parties. "The safety and privacy of students is our top priority," a department spokesperson said.
However, State Opposition Leader Jess Wilson demanded answers, calling on the government to clarify how many students' information was compromised and to guarantee it is not in the hands of those who would misuse it.
Education Minister Ben Carroll said the safety, privacy and security of students, staff and families was the priority, and that he expected the department to take every possible measure to protect Victorian student data. Parents and students have been provided with guidance on how schools are managing the situation ahead of the return to school.
The Office of the Victorian Information Commissioner is now actively engaging with the education department regarding its obligations under the Privacy and Data Protection Act.
