The Australian National University (ANU) has been the victim of an online data breach, impacting on the private records of a large number of its staff, students and visitors dating back 19 years.
Announcing the discovery of the breach, Vice Chancellor of the ANU, Brian Schmidt said that in late 2018, a sophisticated operator had accessed the university’s systems illegally, an intrusion that was only detected two weeks ago.
Professor Schmidt said the two-week delay was necessary for staff to further strengthen the systems against secondary or opportunistic attacks.
“We believe there was unauthorised access to significant amounts of personal staff, student and visitor data extending back 19 years,” Professor Schmidt said.
“Depending on the information you have provided to the university, this may include names, addresses, dates of birth, phone numbers, personal email addresses and emergency contact details, tax file numbers, payroll information, bank account details, and passport details.”
He said student academic records were also accessed.
“The systems that store credit card details, travel information, medical records, police checks, workers’ compensation, vehicle registration numbers, and some performance records have not been affected,” Professor Schmidt said.
“We’re working closely with Australian Government Security Agencies and industry security partners to investigate further.”
He said the university had taken immediate precautions to further strengthen its IT security and was working continuously to build on those precautions to reduce the risk of a future intrusion.
He said he knew his announcement would cause distress to many in the ANU and community services had been put in place to provide advice and support.
“We have set up a direct help line, 1800 275 268, for anyone seeking more information or with particular personal concerns,” Professor Schmidt said.
