AU Incident – Education Cyber Attack, 04 February 2025

The University of Notre Dame Australia in Western Australia confirms cyber incident. Issues with enrolling and accessing class timetables, weeks after a cyber-attack

Claims are that 62.3 Gb of data was exfiltrated. Containing employee and student contact data, medical documents, confidential agreements and licenses.

Company Statement: Statement from the University of Notre Dame Australia – 30 January 2025
Website: University of Notre Dame Australia https://www.notredame.edu.au/
Source: University of Notre Dame Australia confirms cyber incident | Cyberdaily.au

View more incidents relating to the Education and Training sector and incidents from Western Australia.

19th Feb 2025 – Cyber attack at University of Notre Dame still disrupting services as semester one begins, resolution time unclear | ABC News (Australia)
Students at Notre Dame University in Perth are reportedly having issues with enrolling and accessing class timetables, weeks after a cyber attack impacted IT systems.
The university is using manual processes and is also working to verify claims a third party accessed some of its data.

Summary: After revealing to ABC News in Western Australia that it may have suffered some form of cyber incident impacting its multifactor authentication service last week, the University of Notre Dame Australia has confirmed its Western Australia campus is investigating a possible cyber attack.

University of Natre Dame Australia Statement

Statement: “The University of Notre Dame Australia is investigating a cyber incident,” a university spokesperson said in a statement. We have reported the incident to the Australian Cyber Security Centre and relevant government agencies and are working closely with them as part of our response. As this is an ongoing investigation, we can not comment further on the incident.

Data Extracted: In the breach listing it was claimed that 62.3 Gb of data was exfiltrated. Containing employee and student contact data, medical documents, confidential agreements and licenses.

Update: Other than the incident was first reported on 28 January, little else is known about the incident and what data may be impacted. So far, Cyber Daily has not observed any threat actor coming forward to claim responsibility for the hack.