A major cybersecurity incident involving QLearn has affected thousands of educational institutions worldwide, including Queensland state schools and universities, after a data breach involving third-party education technology provider Instructureexposed personal information linked to students and staff.
See also: Education Authority Cyberattack: Problems in schools in Northern Ireland
Queensland Education Minister John-Paul Langbroekconfirmed the incident in an official statement, saying the Queensland Department of Education has been made aware of the international cybersecurity breach involving Instructure, the provider behind the Department's online learning platform, QLearn.
According to initial estimates, the breach could affect more than 200 million people and over 9,000 institutions worldwide, making it one of the largest education cybersecurity breaches revealed this year.
The Department of Education said students and staff who have worked or studied in Education Queensland since 2020 may have been affected by the QLearn cybersecurity incident.
Authorities said the compromised information appears to be limited to names, email addresses and school locations. Officials added that there is currently no evidence that passwords, dates of birth or financial information were accessed in the breach.
The QLearn online learning platform was introduced to Queensland schools in 2020 under the previous government and has since become a widely used digital education system across the state.
See also: Texas sues PowerSchool for student data breach
Minister Langbroek said school principals have already begun contacting affected families and teachers to inform them of the breach and provide further guidance.
The QLearn cybersecurity incident has once again highlighted the growing cybersecurity risks facing the global education sector, particularly as schools and universities continue to rely heavily on third-party digital learning platforms.
The Global Education Sector Continues to Face Cybersecurity Threats
The QLearn cybersecurity incident adds to a growing list of cyberattacks and data breaches targeting educational institutions worldwide. Schools, universities and online learning providers have become frequent targets due to the large amount of personal information they handle and the widespread use of interconnected digital platforms.
Educational systems often rely on multiple third-party vendors for online learning, communications, and student management services, increasing the potential attack surface for cybercriminals.
See also: Cyberattack on PowerSchool exposes personal data
The Queensland Department of Education said it would continue to update the public as more information becomes available from the ongoing investigation into the breach.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
