Mathspace breach exposes data of more than a million students and school staff in Australia and New Zealand

Mathspace, the digital mathematics learning service adopted by many schools across Australia and New Zealand, announced a security incident that compromised the personal information of 1,079,819 individuals, including students, parents, teachers and other staff members.

The company said that the breach resulted from attackers taking advantage of a critical vulnerability in its platform. While the exact technical details have not been disclosed, the intrusion allowed unauthorized access to user records stored within Mathspace’s databases.

Mathspace is widely used in K‑12 education to deliver interactive lessons, homework and assessments, especially after the pandemic accelerated the shift to online resources. The scale of the breach means that a substantial portion of the region’s school community may have had sensitive data such as names, contact details and, potentially, school‑related identifiers exposed.

In response, Mathspace said it has patched the vulnerability, engaged independent cybersecurity experts to investigate the incident and is working with relevant authorities. Affected users have been notified and the company is offering guidance on protecting accounts and monitoring for any signs of misuse.

The episode arrives amid growing scrutiny of data‑privacy practices in the education sector, with regulators in both countries emphasizing compliance with privacy legislation. Schools are expected to review their digital‑tool contracts and consider additional safeguards, while the breach may prompt broader discussions about the security of cloud‑based learning platforms.