GoKawiilMathspace breach exposes data of over 1 million users in Australia, New Zealand
Mathspace, an online maths learning platform used in thousands of schools, revealed that hackers breached its self-hosted Metabase reporting tool and stole personal data on students, parents, guardians and staff. The company said attackers first gained access on August 10, extracted data on August 27, and the breach was confirmed on September 3, affecting 1,079,819 people in Australia and New Zealand. Mathspace stated that passwords, academic records and authentication credentials were not compromised.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how vulnerabilities in third-party analytics tools like Metabase can expose sensitive data belonging to minors and school communities, a population particularly sensitive to privacy violations. It also underscores the risks schools face when relying on ed-tech vendors whose internal systems may not be adequately secured against exploitation of known software flaws.
- Over 1 million students, parents and staff in Australia and New Zealand had personal data stolen.
- The breach exploited a vulnerability in Mathspace's self-hosted Metabase reporting software, granting unauthorized admin access.
- Passwords, academic records and authentication credentials were reportedly not affected.
Yubico YubiKey 5C NFC Security Key — Breaches like this one show how much damage a single stolen admin login can do — a hardware security key makes account takeover far harder than a password alone. The YubiKey 5C NFC works over USB-C or by tapping to your phone, and it protects logins on Google, Microsoft, password managers and more. It's a pocket-sized upgrade for anyone whose family data just showed up in someone else's download.
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-07
Published there as: “Mathspace discloses data breach affecting over 1 million people”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.