WESTERN SYDNEY UNI SUFFERS DATA BREACH, AGAIN

Summary from the TLDR InfoSec newsletter

Western Sydney University (WSU) reported its third security incident of the year, with an unauthorized user accessing data belonging to staff and students. The breached data includes tax file numbers, bank account details, passport and driver's license details, visa information, health and disability information, addresses, email addresses, phone numbers, names, dates of birth, ethnicities, and student and staff IDs. WSU stated that the breach was caused by a daisy chain of supply chain attacks culminating in a third-party student management system being breached.