PNORS Technology Group

PNORS Technology Group, operating under the alias PNORS, is an Australian-headquartered technology firm. Based on confirmed incident details, the organisation processes highly sensitive personal information collected from Victorian primary school students. This data originates from mandatory entrance questionnaires administered by schools and includes detailed developmental, behavioural, and family-related information alongside standard demographics. The firm's services involve handling and managing this confidential health and personal data, indicating a role in supporting educational institutions within Victoria, Australia. The breach incident also encompassed data from Kilvington Grammar School, suggesting PNORS may provide similar data management services to private schools in the region.

The November 2022 cyberattack targeting PNORS compromised encrypted systems containing the sensitive student records. This incident revealed that the organisation operates systems holding critical personal identifiers such as birthdates, addresses, Medicare numbers, and detailed health information for both current and former students. The severity of the breach prompted collaboration with Victorian government agencies, including the Department of Education, to investigate its scope. PNORS engaged with the state's Cyber Incident Response Service during this investigation. This response highlights the organisation's involvement in managing data subject to significant privacy regulations and its operational interaction with government entities following a security incident.