{"id":1048047,"date":"2026-09-07T02:49:25","date_gmt":"2026-09-07T02:49:25","guid":{"rendered":"https:\/\/www.europesays.com\/us\/1048047\/"},"modified":"2026-09-07T02:49:25","modified_gmt":"2026-09-07T02:49:25","slug":"mathspace-data-breach-million-plus-students-adults-lose-data-in-major-hack","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/us\/1048047\/","title":{"rendered":"Mathspace data breach: Million-plus students, adults, lose data in major hack"},"content":{"rendered":"

More than a million students, parents and guardians, and school teachers have had personal data such as names and email addresses stolen in a major cyberattack<\/a> on a learning provider.<\/p>\n

Online maths education<\/a> support program Mathspace confirmed in a blog post written by chief technical officer Alvin Savoy that on between August 10 and August 27, \u201cunauthorised parties\u201d were able to access an internal reporting system after a security patch had not been installed.<\/p>\n

\"\"<\/p>\n

Mathspace has been hit with a major cyberattack.\u00a0Mathspace<\/p>\n

Data the hackers snatched up includes user ID, username, first name, last name, email address, country, time zone, user type, email-verification status, last-active date, last-login date, and date joined.<\/p>\n

Not every victim had all those fields of data stolen, Mathspace said in their post.<\/p>\n

No academic records, learning activities, results, assessment records, passwords (hashes), authentication tokens, SSO credentials, or API credentials were exposed, Mathspace said.<\/p>\n

\u201cThe exposed data did not include records linking user accounts to their schools,\u201d the post read.<\/p>\n

\u201cHowever, for schools with identifiable email domains, we understand this may be possible.\u201d<\/p>\n

Mathspace said the identity of the hackers<\/a> was unknown but they had \u201cno evidence so far\u201d the data had been published, distributed, or sold.<\/p>\n

A total of 1,079,819 people across Australia and New Zealand were affected.<\/p>\n

\u201cNames, email addresses and account details can make impersonation attempts more convincing,\u201d Mathspace said.<\/p>\n

\u201cSomeone may use them to send a message that appears to come from Mathspace, your school or another organisation you know.\u201d<\/p>\n

People are urged to check unexpected messages independently, and to not pass on passwords or verification codes in response to a message.<\/p>\n

If unsure, people are urged to respond to an organisation purporting to contact them via contact details listed on an official site, rather than hitting \u201creply\u201d directly on a message.<\/p>\n

\u201cWatch for unusual account activity. Pay attention to unexpected password-reset emails or changes to your account details,\u201d Mathspace said.<\/p>\n

Anybody whose Mathspace password is the same as a password on another account, is advised to switch the second to a unique password.<\/p>\n

Mathspace has notified affected schools<\/a>, cyber-authorities, and education departments in Australia and New Zealand and is now working on contacting individuals.<\/p>\n

\"Hacker<\/p>\n

The perpetrators of the cyberattack are unknown.\u00a0Getty Images\/iStockphoto<\/p>\n

Anybody wishing to check whether their data has been affected can contact Mathspace by emailing data-breach-response@mathspace.co or using support channels provided on the Mathspace website.<\/p>\n

The compromised internal reporting service has since been taken down.<\/p>\n

\u201cWe\u2019re truly sorry this happened and are taking steps to prevent similar breaches in the future,\u201d the blog post read.<\/p>\n

\u201cProtecting the information entrusted to us by students, families and schools is our responsibility.\u201c<\/p>\n","protected":false},"excerpt":{"rendered":"More than a million students, parents and guardians, and school teachers have had personal data such as names…\n","protected":false},"author":3,"featured_media":1048048,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[2],"tags":[4740,50],"class_list":["post-1048047","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news","tag-australia","tag-news"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/1048047","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/comments?post=1048047"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/1048047\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media\/1048048"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media?parent=1048047"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/categories?post=1048047"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/tags?post=1048047"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}