Victoria Department of Education data breach exposes student information

The Department of Education in Victoria, Australia, has confirmed a data breach affecting current and former students, leading to a mandatory reset of all student passwords. The incident involved unauthorized access to a database containing personal information and email addresses, prompting immediate security measures to protect students, as reported by Bleeping Computer.

An unauthorized third party gained access to student names, school names, year levels, and school-issued email addresses. Encrypted passwords were also compromised, though the department stated that more sensitive data like birth dates or phone numbers were not accessed. As a precautionary measure, all student passwords have been reset, temporarily blocking access to school accounts.

The department is prioritizing new password issuance for VCE students and will provide others at the start of the school year. The exact number of affected students is unknown, but the Victorian government school system serves approximately 650,000 students. Further investigation into the breach's timeline and the attackers' motives is expected.

Source: Bleeping Computer