A data breach at Australian-founded learning platform Mathspace has exposed personal information belonging to more than 1 million students, parents and school staff across Australia and New Zealand, with the company confirming attackers exploited a critical software vulnerability that sat unpatched for more than three weeks.