Xavier College reveals students, staff have had their personal information stolen in hack

Xavier College says more than 100 people have had their sensitive information stolen and now fear hackers may share the data publicly.

Xavier College has fallen victim to a data hack. Picture: Mark Stewart

Xavier College says stolen data from its students and wider school community may be released following a hack earlier this year.

In June, the leading catholic boys school became aware that the email account of one of its employees had been accessed by a third party.

The school said it immediately informed parents, as well as the Office of the Australian Information Commissioner and Australian Cyber Security Centre that same month.

Around 45 people had their financial information stolen following the hack.

A school spokesperon said it chose to not inform the wider community due to only a “very small number of people” being impacted by the incident.

Xavier said there was no evidence to believe the information would be publicly disclosed.

“Then, in late October, it came to our attention that an unauthorised third party may disclose details of these mailbox contents,” the spokesperson said.

Xavier said it now believes more than 100 people have had their sensitive information stolen including student records, birth certificates, and visa applications. It said no academic information was stolen from the incident.

The school community was informed about the hack in a letter on Tuesday.

“The College has now taken steps to re-assess the original data and re-evaluate the risk parameters to consider whether any further individuals have been affected,” the school spokesperson said.

“As we did in June, immediate notification to specific individuals is occurring, while our wider school community has also been informed.”

The Xavier spokesperson stressed that only “one employee’s inbox” has been hacked and “the College network, learning and database systems remain secure.”

The hack follows a data breach from technology company PNORS which works with several state departments including the Department of Education earlier this month.

Thousands of Victorian families may have had their personal information stolen following the breach.