Western Sydney University Hit by Multiple Data Breaches

Western Sydney University (WSU) has faced major cybersecurity breaches, exposing personal information of approximately 10,000 current and former students. The first incident involved unauthorized access to the university's single sign-on system between January and February 2025, compromising demographic, enrollment, and progression data. The second breach saw similar data leaked on the dark web, discovered by the university in March 2025 but initially posted in November 2024. WSU has taken actions to mitigate the breaches, involving internal and third-party cyber experts, and has apologized for the personal impact on the community. Investigations are ongoing, and the university is contacting affected individuals to advise them on protective measures. The institution acknowledges being a target of persistent cyber attacks, reflecting a broader threat landscape facing the higher education sector.