Supply chain
β Supply Chain
University of Sydney Third-Party Breach (September 2023)
Primary Source βIncident Details
University of Sydney data breach impacts recent applicants. The University of Sydney (USYD) has announced it has suffered a data breach through a third-party service provider, exposing the personal data of recently applied and enrolled international applicants. The University of Sydney (USYD) announced that a breach at a third-party service provider exposed personal information of recently applied and enrolled international applicants. The public university started operations in 1850 and has nearly 70,000 students and about 8,500 academic and administrative personnel. It is considered one of Australia’s most important educational institutes.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Unknown
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-09-01 Breach occurred
- 2023-09-03 Publicly disclosed