University of Sydney Cyberattack Exposes Decades of Staff and Student Data

The University of Sydney disclosed a cybersecurity incident (discovered December 2025) in which unauthorized access to an internal code library allowed download of historical datasets containing personal information — including names, dates of birth, phone numbers, home addresses, and employment details — affecting roughly 27,500 individuals (current and former staff, students and alumni) and a handful of supporters. The university has contained the access, engaged external cybersecurity partners, reported the breach to regulators, begun notifying affected people, and is providing support services while the investigation continues; there is currently no evidence the data has been published or used.