{"id":"victorian-school-student-data-breach-jan-2026","category":"breach","status":"closed","title":"Victorian government school breach exposed current and former students' account details","tldr":"An attacker stole student names, school details, email addresses and encrypted passwords across Victoria's government schools. Passwords were reset, but stolen information remains a risk. Contact your school or 1800 338 663 for advice.","summary":"An attacker compromised one Victorian government school's network and stole student information from a Department of Education database. The breach covered current students across government schools and hundreds of thousands of former students. Information included names, schools, year levels and department-issued email addresses and encrypted passwords where used. The department says no other student or family data was accessed. It reset student passwords and introduced safeguards. OVIC's October investigation found failures in patching, security oversight and retention of former students' records, breaching two privacy principles. It recommended improvements by 31 December 2026; completion was not established in the sources reviewed as at 3 November. OVIC received no evidence of further misuse or disclosure immediately after the attack, but warned that the attacker retained a copy that could be misused later.","action":"Contact your school or the Department of Education on 1800 338 663 for questions about affected accounts and replacement passwords. Remind children not to respond to unexpected emails. If disclosure of a school location creates a safety concern, contact the school and Victoria Police on 131 444, or 000 in an emergency.","product":"Victorian Department of Education government-school student accounts","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["victoria","education","student-data","data-breach","australia"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Cyber incident impacting Victorian government schools","url":"https://www.vic.gov.au/cyber-incident-impacting-victorian-government-schools","by":"Victorian Department of Education","date":"2026-10-05"},{"kind":"advisory","title":"Investigation into the data breach of student information at the Department of Education","url":"https://ovic.vic.gov.au/regulatory-action/investigation-into-the-data-breach-of-student-information-at-the-department-of-education/","by":"Office of the Victorian Information Commissioner","date":"2026-10-07"},{"kind":"advisory","title":"Investigation into the data breach of student information held by the Department of Education — investigation report","url":"https://ovic.vic.gov.au/wp-content/uploads/2026/10/20261005-Investigation-report-DE-Student-Information-Breach.pdf","by":"Office of the Victorian Information Commissioner","date":"2026-10-07"},{"kind":"advisory","title":"Cyber incident at Victorian Government schools","url":"https://fac.dffh.vic.gov.au/news/cyber-incident-victorian-government-schools","by":"Victorian Government","date":"2026-01-16"},{"kind":"advisory","title":"OVIC commences investigation into cyber incident at the Department of Education","url":"https://ovic.vic.gov.au/newsitem/ovic-commences-investigation-into-cyber-incident-at-the-department-of-education/","by":"Office of the Victorian Information Commissioner","date":"2026-01-22"},{"kind":"news","title":"Hackers access names, emails of Victorian students in data breach","url":"https://www.abc.net.au/news/2026-01-14/student-data-breach-victorian-education-department/106230114","by":"ABC News","date":"2026-01-14"},{"kind":"news","title":"Vic Education database breached via school's network","url":"https://www.itnews.com.au/news/vic-education-database-breached-via-schools-network-622987","by":"iTnews","date":"2026-01-15"}],"started":"2026-01-14","closed":"2026-10-07","created":"2026-11-03T20:37:57.037Z","updated":"2026-11-03T20:37:57.037Z","cve_notes":[],"timeline":[{"at":"2026-10-07","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"By this date, OVIC had published findings that inadequate security and records management breached students' privacy. The department acknowledged the findings and said further improvements were necessary.","url":"https://ovic.vic.gov.au/regulatory-action/investigation-into-the-data-breach-of-student-information-at-the-department-of-education/","by":"Office of the Victorian Information Commissioner","patch":null},{"at":"2026-01-22","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"OVIC announced an investigation into how the breach happened and whether the department had met its privacy obligations.","url":"https://ovic.vic.gov.au/newsitem/ovic-commences-investigation-into-cyber-incident-at-the-department-of-education/","by":"Office of the Victorian Information Commissioner","patch":null},{"at":"2026-01-16","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"A Victorian Government notice said all student passwords had been reset, with replacements to be issued when school resumed. Parents and carers were being contacted.","url":"https://fac.dffh.vic.gov.au/news/cyber-incident-victorian-government-schools","by":"Victorian Government","patch":null},{"at":"2026-01-14","added":"2026-11-03T20:32:12.437Z","kind":"disclosed","text":"The breach became public. The department said an attacker entered through a school's network and accessed student account details; it had temporarily disabled systems to prevent further access.","url":"https://www.abc.net.au/news/2026-01-14/student-data-breach-victorian-education-department/106230114","by":"ABC News","patch":null},{"at":"2026-01-07","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"The Department of Education notified OVIC of the attack.","url":"https://ovic.vic.gov.au/wp-content/uploads/2026/10/20261005-Investigation-report-DE-Student-Information-Breach.pdf","by":"Office of the Victorian Information Commissioner","patch":null},{"at":"2025-12-23","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Forensic investigators confirmed that data had been taken. Containment and remediation work ran from 5 to 30 December.","url":"https://ovic.vic.gov.au/wp-content/uploads/2026/10/20261005-Investigation-report-DE-Student-Information-Breach.pdf","by":"Office of the Victorian Information Commissioner","patch":null},{"at":"2025-12-02","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"A Department of Education vendor alerted the department to significant threats. The department activated its cyber incident response plan the following day.","url":"https://ovic.vic.gov.au/wp-content/uploads/2026/10/20261005-Investigation-report-DE-Student-Information-Breach.pdf","by":"Office of the Victorian Information Commissioner","patch":null},{"at":"2025-11-06","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"This was the earliest evidence of malicious activity found by investigators. OVIC says the attack probably began earlier, but the exact date could not be established.","url":"https://ovic.vic.gov.au/wp-content/uploads/2026/10/20261005-Investigation-report-DE-Student-Information-Breach.pdf","by":"Office of the Victorian Information Commissioner","patch":"na"}],"url":"https://hard.fyi/live/victorian-school-student-data-breach-jan-2026/","json":"https://hard.fyi/api/live?id=victorian-school-student-data-breach-jan-2026"}