Western Sydney University

WSU has faced multiple security incidents exposing personal data of its community members. Access to demographic, enrollment, and progression information of roughly 10,000 current and former students was gained via an SSO system breach. A separate dark web leak included names, contact details, birth dates, health data, government IDs, and bank info of 7,500 individuals. Hackers held network access from July 9, 2023, to March 16, 2024, accessing 580 TB of data.

Source: https://www.bleepingcomputer.com/news/security/western-sydney-university-discloses-security-breaches-data-leak/

TPRM report: https://scoringcyber.rankiteo.com/company/western-sydney-university

"id": "wes944041125",
"linkid": "western-sydney-university",
"type": "Breach",
"date": "4/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': ['10,000 current and former '
                                               'students',
                                               '7,500 individuals'],
                        'industry': 'education',
                        'name': 'WSU',
                        'type': 'university'}],
 'attack_vector': ['SSO system breach', 'dark web leak'],
 'data_breach': {'number_of_records_exposed': ['10,000', '7,500'],
                 'personally_identifiable_information': ['names',
                                                         'contact details',
                                                         'birth dates',
                                                         'health data',
                                                         'government IDs',
                                                         'bank info'],
                 'type_of_data_compromised': ['demographic information',
                                              'enrollment information',
                                              'progression information',
                                              'names',
                                              'contact details',
                                              'birth dates',
                                              'health data',
                                              'government IDs',
                                              'bank info']},
 'description': 'Multiple security incidents at WSU exposed personal data of '
                'its community members. Access to demographic, enrollment, and '
                'progression information of roughly 10,000 current and former '
                'students was gained via an SSO system breach. A separate dark '
                'web leak included names, contact details, birth dates, health '
                'data, government IDs, and bank info of 7,500 individuals. '
                'Hackers held network access from July 9, 2023, to March 16, '
                '2024, accessing 580 TB of data.',
 'impact': {'data_compromised': ['demographic information',
                                 'enrollment information',
                                 'progression information',
                                 'names',
                                 'contact details',
                                 'birth dates',
                                 'health data',
                                 'government IDs',
                                 'bank info']},
 'title': 'WSU Security Incidents',
 'type': ['data breach', 'unauthorized access']}