BREAKINGOver 200 staff stood down as property developer faces collapse
More than a million students, parents and guardians, and school teachers have had personal data such as names and email addresses stolen in a major cyberattack on a learning provider.
Online maths education support program Mathspace confirmed in a blog post written by chief technical officer Alvin Savoy that on between August 10 and August 27, “unauthorised parties” were able to access an internal reporting system after a security patch had not been installed.
Data the hackers snatched up includes user ID, username, first name, last name, email address, country, time zone, user type, email-verification status, last-active date, last-login date, and date joined.
Not every victim had all those fields of data stolen, Mathspace said in their post.
No academic records, learning activities, results, assessment records, passwords (hashes), authentication tokens, SSO credentials, or API credentials were exposed, Mathspace said.
“The exposed data did not include records linking user accounts to their schools,” the post read.
“However, for schools with identifiable email domains, we understand this may be possible.”
