Mathspace, an online learning platform, has confirmed a cyberattack that exposed the personal data of more than a million Australian users, including school students, parents, teachers and guardians. The company said "unauthorised parties" gained access to an internal reporting system, though it stressed that no passwords, academic records or authentication credentials were compromised. The breach highlights ongoing vulnerabilities in education technology platforms that hold sensitive information on minors and school staff.

The exposed data included user IDs, usernames, full names, email addresses, countries, time zones, account types, and login and join dates, though not every affected user had all these fields exposed. Mathspace's chief technical officer, Alvin Savoy, said the data did not directly link accounts to specific schools, but acknowledged this could be inferred for schools with identifiable email domains. The identity of the attackers remains unknown, and the company said there is currently no evidence the stolen data has been published, distributed or sold.