A cyberattack on the educational platform Mathspace has resulted in the theft of personal data belonging to over one million Australian users. The breach, confirmed by the company in a blog post on Monday, involved unauthorized parties accessing an internal reporting system.
The compromised data includes user IDs, usernames, first and last names, email addresses, countries, time zones, user types, email verification status, last active dates, last login dates, and the dates users joined the platform. Mathspace stated that not all exposed records contained every piece of this information.
The company emphasized that no academic records, learning activities, results, assessment records, passwords or password hashes, authentication tokens, SSO credentials, or API credentials were accessed. Additionally, the exposed data did not directly link user accounts to specific schools, although the company acknowledged that identifiable email domains could potentially facilitate such connections.
Mathspace has not yet identified the perpetrators of the hack. Thus far, there is no evidence to suggest that the stolen data has been published, distributed, or sold. The incident affects school students, parents, teachers, and guardians who utilize the Mathspace platform.