The Victorian Department of Education has confirmed a major data breach affecting all 1700+ government schools. Hackers accessed the names, emails, and encrypted passwords of current and former students, impacting potentially hundreds of thousands of individuals just weeks before the new school year
Australian car rental insurer Prosura has suffered a major data breach, exposing the personal and policy information of an estimated 300,000 customers. Attackers are now selling the stolen data identity data on a public forum after the company reportedly failed to meet their demands.
Spangle AI, a startup founded by former Amazon and Bolt executives, has raised $15 million in a Series A round to build an agentic infrastructure for ecommerce. The platform connects AI-driven product discovery with real-time conversion.
The Victorian Department of Education has confirmed a major data breach affecting all 1700+ government schools. Hackers accessed the names, emails, and encrypted passwords of current and former students, impacting potentially hundreds of thousands of individuals just weeks before the new school year
Cyber News Centre's cyber update for 15th January 2026: The Victorian Department of Education has confirmed a major data breach impacting all 1700 of its government schools, with the personal information of current and former students accessed by an unauthorised third party.
Update: The Victorian Department of Education has disclosed that an unauthorised third party breached its systems, gaining access to a database containing the personal information of current and former students across all 1,700 government schools.
The incident, which reportedly occurred weeks ago but was announced yesterday, was initiated through a compromised school network. The exposed data includes student names, school-issued email addresses, year levels, and encrypted passwords. The department has confirmed that more sensitive information, such as dates of birth, home addresses, and phone numbers, was not compromised. In response, all student passwords have been reset as a precautionary measure, temporarily blocking access to school accounts. New credentials will be issued to senior VCE students as a priority, with all other students receiving them at the start of the 2026 school year.
The department is working with cybersecurity experts and other government agencies to investigate the incident and has disabled the attack vector to prevent further access. There is currently no evidence to suggest the stolen data has been publicly released or shared with other malicious actors. The timing of the disclosure is critical, coming just weeks before students are scheduled to return to classrooms.
Why it Matters: This breach represents a significant failure to protect the sensitive data of a large and vulnerable population. The exposure of student names and email addresses, even without more detailed personal information, creates a substantial risk of targeted phishing campaigns and other social engineering attacks against students, their families, and school staff.
The timing, just before the school year begins, maximises potential disruption and creates a logistical challenge for the department in securely re-issuing credentials for hundreds of thousands of students. The incident also erodes public trust in the government's ability to secure critical digital infrastructure, particularly within the education sector.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Australian car rental insurer Prosura has suffered a major data breach, exposing the personal and policy information of an estimated 300,000 customers. Attackers are now selling the stolen data identity data on a public forum after the company reportedly failed to meet their demands.
Instagram is denying a system breach after data from 17.5 million accounts was leaked online and users were hit with a wave of password reset emails. Meta says it fixed a bug causing the email spam, but the leaked data, though likely old, still poses a significant phishing risk to users.
A sophisticated Chinese-speaking threat actor has been caught exploiting a trio of VMware ESXi zero-day vulnerabilities, allowing them to escape virtual machines and gain full control of the underlying hypervisor.
Gulshan Management Services, a Texas-based operator of ~150 gas stations, has disclosed a major data breach affecting over 377,000 individuals. The breach, resulting from a phishing attack that led to a ransomware infection, exposed highly sensitive personal and financial information.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
