Nagle Catholic College

Summary

Nagle Catholic College suffered a cyber attack compromising sensitive financial data belonging to parents, including bank account details, credit card information, and scanned signatures collected during school fee transactions. The institution confirmed unauthorized access to this information and advised impacted individuals to monitor their financial accounts for fraudulent activity.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On or around June 18, 2019, Nagle Catholic College in Geraldton, Western Australia, experienced a cyber attack resulting in unauthorized access to sensitive parent financial data. The breach compromised bank account details, credit card information, and scanned signatures collected by the school during fee payment processing. The college confirmed the incident publicly, acknowledging that attackers potentially exfiltrated this information. The compromised signatures increased risks associated with financial fraud, as they could be misused to authorize transactions. Parents were directly notified of the exposure and advised to vigilantly monitor their financial accounts for unauthorized activity. The attack specifically targeted payment systems handling parental contributions, though the college did not disclose technical details about the intrusion method or duration of unauthorized access.

The confirmed theft of financial identifiers and biometric signatures (via scanned documents) created immediate risks of fraudulent transactions and identity theft for affected families. Nagle Catholic College assumed responsibility for breach notifications, urging impacted parents to scrutinize bank statements and report suspicious activity. No specific details about the number of affected individuals, forensic findings, or attacker attribution were disclosed publicly. The incident highlighted vulnerabilities in the storage of sensitive payment data, particularly the retention of scanned signatures, which amplified potential misuse. The college’s response focused on mitigating downstream financial harm to parents rather than detailing remediation steps for its systems. Financial institutions likely heightened fraud detection measures for accounts linked to the school’s fee payments following the disclosure.

Sources

Sources available to members: 1 source.