Cyber Incident Victim: University of Wollongong
Date:
Dec 2023
Location:
Australia
Summary
The University of Wollongong experienced a cyber attack likely compromising student and staff data, detected and contained within a single day. External experts were engaged to investigate the incident’s cause and scope, though specifics regarding the number of affected individuals, types of data accessed, and breach duration remained undisclosed. Normal operations continued during the assessment, with public notification delayed until the evening following containment. The institution coordinated with authorities and regulators, pledging ongoing updates while refraining from immediate guidance on protective measures for impacted accounts.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The University of Wollongong (UOW) detected a cyber security incident within its systems on Thursday, December 7, 2023, which it subsequently contained the same day. The university confirmed the incident likely resulted in unauthorized access to data belonging to students and/or staff members, though it did not disclose the specific nature of the attack or the methods used by the threat actors. UOW initiated an investigation to determine the cause and full extent of the breach, engaging external cybersecurity experts to assist with the assessment and response. Normal university operations continued during this period, with no immediate disruption reported to academic or administrative functions. UOW notified relevant authorities and government regulators of the incident, aligning with standard breach protocols. The university issued an initial public statement on Friday evening, December 8, approximately 24 hours after detecting the incident, acknowledging the likelihood of data compromise but providing no concrete details about the scope or timeline of unauthorized access.
UOW’s statement did not specify how many individuals were affected, what types of data were accessed, or how long the breach had persisted prior to detection. The university advised staff and students to proactively change their passwords as a precaution, though it did not confirm whether account credentials were definitively compromised. When questioned by media about the delay in public notification and the lack of detailed guidance for affected individuals, UOW declined to provide further comment beyond its initial statement. The investigation remained ongoing as of Saturday, December 9, with the university emphasizing its commitment to providing updates as new information became available. No ransomware claims, threat actor attribution, or specific system vulnerabilities were disclosed in the immediate aftermath of the incident.