Queensland School Photography

Queensland School Photography (QSP) is an Australian company that provides photography services to schools, capturing student portraits and class images for families. The organization operates by sending photographers to schools to take pictures, after which parents can order prints and digital products through an online payment portal. This portal is a central component of its business model, facilitating direct transactions with customers for the photography services. QSP's market is focused on the school sector, serving as a vendor to educational institutions and a service provider to parents and students. While the company's exact scale, such as the number of schools served or annual revenue, is not disclosed, its operations are rooted in Australia with a specific association with Queensland, as indicated by its primary alias. The reliance on an online system for payments underscores its integration of digital commerce into traditional school photography workflows.

In March 2017, QSP experienced a notable security incident when its online payment system was compromised by hackers. The breach led to the theft of credit card details from parents who had used the portal, resulting in fraudulent international transactions for flights, accommodation, and ride-sharing services, with individual losses reported in the thousands of dollars. The organization confirmed that only payment card information was accessed, and photographic data remained secure. Following the discovery, QSP temporarily disabled the payment portal, initiated an investigation with its bank and law enforcement, and notified affected customers. This event impacted multiple parents from various schools, highlighting a significant vulnerability in the company's data protection measures for financial information. The incident remains a key reference point for understanding the operational risks associated with handling sensitive payment data in the school services sector.