❌

Visualização normal

Antes de ontemCybersecurity News
  • ✇Firewall Daily – The Cyber Express
  • Springfield Schools Prepare for Return After Cyberattack Disruption Ashish Khaitan
    Springfield Public Schools remains in recovery mode following a cyberattack that shut down district operations and forced schools to close for the second half of the week, and the local teachers union says too many questions remain unanswered as students prepare to head back to class.  The Springfield cyberattack hit just one week into the new school year, leaving parents suddenly without childcare or the school meal programs many families depend on. District officials have said students are
     
  • ↗️

Springfield Schools Prepare for Return After Cyberattack Disruption

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
11 de Setembro de 2026, 06:42

Springfield cyberattack

Springfield Public Schools remains in recovery mode following a cyberattack that shut down district operations and forced schools to close for the second half of the week, and the local teachers union says too many questions remain unanswered as students prepare to head back to class.  The Springfield cyberattack hit just one week into the new school year, leaving parents suddenly without childcare or the school meal programs many families depend on. District officials have said students are expected to return to classrooms on Monday, but the disruption caused by the incident has rippled well beyond the classroom. 

Classrooms Closed After the Springfield Cyberattack 

To help ease the burden of the Springfield cyberattack, the district arranged grab-and-go meal service at six locations across the city on both Thursday and Friday, with each stop providing a lunch as well as a breakfast for the following morning. The YMCA of Greater Springfield also stepped up, opening its doors to full-day care for any family already enrolled in its before- and after-school programs.   YMCA CEO Dexter Johnson told 22News, "We opened our doors to all of our families we serve in our before- and after-school programs for full-day care until the school system is able to reopen its doors." The organization's downtown location alone has taken in more than 100 children since the closures began, and Johnson said spots remained available for families needing full-day coverage on Friday. 

Officials Address the Cyberattack on Springfield 

Mayor Domenic Sarno and Superintendent Dr. Sonia Dinnall led a Thursday news conference alongside other district officials to update the public on recovery efforts and the plan for reopening. Sarno repeatedly referred to the incident as a "cyber attack" throughout the briefing and placed blame squarely on the "cyber attack hackers" behind it. 

Union Says Key Questions Remain Unanswered 

Riley Hernandez, president of the Springfield Education Association — which represents roughly 2,700 educators and other school employees — said the union is still waiting for clarity from district leadership on how the cyberattack on Springfield schools may have affected staff and students. We are in the midst of a severe cyber attack. In this trying time, on behalf of the 2700 educators we represent in Springfield Public Schools, I want to acknowledge the stress and confusion this moment of uncertainty and emergency closure has caused students, families, Springfield Education Association members, and all staff in Springfield Public Schools," Hernandez said in a statement Thursday.  Hernandez said he has requested a formal meeting with Dinnall and her cabinet but has yet to receive a response. "I still have not received an invitation to meet with Dr. Dinnall and her cabinet. Many unanswered questions still remain. It is not clear where the District is at in fully resolving this cyber incident or what sensitive information the breach has compromised," he said.  In a letter sent to district officials Wednesday, the union laid out a list of demands ahead of educators' return to the classroom. Among them: what categories of employee data — including health, financial and Social Security information — may have been exposed; whether the breach triggers mandatory legal reporting obligations; and what support the district will offer staff affected by compromised personal information. The union also wants answers on the status of lesson plans and curriculum materials, how students who depend on assistive technology will be served, and how the district will keep buildings secure without functioning phone systems and other safety infrastructure.  Despite the unresolved questions, Hernandez said teachers are ready to get back to work. "As educators, we will be expected to deliver instruction in the midst of an unresolved technological shutdown of Springfield Public Schools. We will rise to the occasion with integrity to provide high quality public education that the students and families of Springfield truly deserve," he said. 

A Day to Regroup 

The union welcomed the district's decision to designate Friday as a professional development day, giving staff time to figure out which systems are still functioning, identify materials that need to be rebuilt from scratch, and prepare for students' return. Hernandez said a smooth transition back to class will depend on educators getting real time to coordinate with administrators and each other.  The SEA's executive committee was set to meet Thursday afternoon to map out next steps. Hernandez said he still intends to press district leaders for a formal sit-down to discuss the return-to-work process, how alternative instruction will be handled, and how the district plans to make up instructional days lost to the cyberattack on Springfield schools. 
  • ✇Firewall Daily – The Cyber Express
  • Mathspace Breach Impacts More Than 1 Million Users in Australia, NZ Ashish Khaitan
    The Mathspace data breach has affected 1,079,819 people in Australia and New Zealand after unauthorized parties accessed an internal reporting system and downloaded user information. Mathspace confirmed the security incident on September 3, 2026, and said the affected records involve students, parents or guardians, teachers, and Mathspace staff.  The company said names, email addresses, and account details were exposed, but customer passwords, single sign-on (SSO) tokens, and other authentica
     
  • ↗️

Mathspace Breach Impacts More Than 1 Million Users in Australia, NZ

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
7 de Setembro de 2026, 04:14

Mathspace data breach

The Mathspace data breach has affected 1,079,819 people in Australia and New Zealand after unauthorized parties accessed an internal reporting system and downloaded user information. Mathspace confirmed the security incident on September 3, 2026, and said the affected records involve students, parents or guardians, teachers, and Mathspace staff.  The company said names, email addresses, and account details were exposed, but customer passwords, single sign-on (SSO) tokens, and other authentication credentials were not. There is currently no evidence that the information has been published, sold, distributed, or otherwise misused. The attacker’s identity remains unknown. 

How the Mathspace Data Breach Happened? 

The security incident resulted from a vulnerability in Mathspace’s self-hosted Metabase installation, which was used for internal reporting. The flaw allowed attackers to obtain administrator access without a legitimate login.  Metabase issued a critical security advisory and patched versions on August 6. Mathspace said its vulnerability-notification process failed to identify and escalate that advisory. The company later updated its Metabase instance on August 29 after seeing a subsequent notice.  An investigation found unauthorized access dating to August 10, Australian Eastern Standard Time. Information was downloaded from Mathspace’s Australian reporting database on August 27. Historical log reviews confirmed the unauthorized access on September 3, before the update had been applied. Mathspace also acknowledged that it did not complete additional compromise checks recommended for potentially affected systems at the time of the update. 

What Information was Exposed? 

The exported data included user IDs, usernames, first and last names, email addresses, country, time zone, user type, email-verification status, last-active date, last-login date and joining date. Not every field appeared for every affected person.  Mathspace said the exposure went beyond names and email addresses. User IDs are internal identifiers, including those linked to student accounts. However, no academic records, learning activities, results, assessments, password hashes, authentication tokens, SSO credentials or API credentials were exposed.  The data did not contain records directly linking accounts to schools, although Mathspace said school affiliations could potentially be inferred where identifiable email domains were used. Former or inactive users may also be affected because retained information could remain in the reporting database. 

What Users Should Know After the Security Incident? 

Names, email addresses, and account details could make phishing or impersonation attempts more convincing. Users have been advised to independently verify unexpected messages, avoid unfamiliar links and attachments, and never provide passwords or verification codes in response to unsolicited communications.  Mathspace is not requiring password resets because customer authentication credentials were not exposed. However, anyone who reused a Mathspace password elsewhere should change those reused passwords to unique ones and monitor accounts for unusual activity. 

Response to the Mathspace Data Breach 

After confirming the breach on September 3, Mathspace took Metabase offline, revoked its API keys, disabled Metabase database-access accounts in its Australian and US Snowflake environments, and changed passwords for its Metabase Cloud SQL databases. The company also copied the application database and exported access logs for investigation. Metabase remains offline while recovery and compromise checks continue.  Mathspace began notifying school contacts on September 4 and started notifying affected individuals on September 6, earlier than the date previously communicated to schools.  On September 4, the security incident was reported to Australia’s Office of the Australian Information Commissioner, the Australian Signals Directorate’s Australian Cyber Security Centre, New Zealand’s Office of the Privacy Commissioner and National Cyber Security Centre, as well as Australian state and territory education departments. 

Why Language Schools Should Prioritize Cybersecurity: A Passwordless Approach

✇Security Boulevard
Por:MojoAuth Blog - Passwordless Authentication &#38 · Identity Solutions
8 de Abril de 2026, 05:45

Learn why language schools should prioritize cybersecurity and how passwordless authentication improves security and protects student data.

The post Why Language Schools Should Prioritize Cybersecurity: A Passwordless Approach appeared first on Security Boulevard.

Six out of 10 UK secondary schools hit by cyber-attack or breach in past year

✇Data and computer security | The Guardian
Por:Dan Milmo and Richard Adams
5 de Outubro de 2025, 11:00

Hackers are more likely to target educational institutions than private businesses, government survey shows

When hackers attacked UK nurseries last month and published children’s data online, they were accused of hitting a new low.

But the broader education sector is well used to being a target.

Continue reading...

© Photograph: MBI/Alamy

© Photograph: MBI/Alamy

© Photograph: MBI/Alamy

❌
❌