Cyber incidents within the higher education sector

The National Student Ombudsman has released a public statement on cyber incidents within the higher education sector.

Since commencing our service in February 2025, we have been informed about 4 major cyber incidents.

The Ombudsman, Iain Anderson, has called on the sector to implement business continuity plans that include strategies and procedures to minimise student impact and ensure accountability, transparency, support and resources are provided to those affected by cyber incidents.

This comes after we investigated a complaint about a ‘Zoom-bombing’ incident where an uninvited person joined a provider’s unsecured online meeting and showed graphic, violent video footage to students.

We’ve heard from students frustrated about a variety of issues caused by cybersecurity failures. Students have the right to make a complaint about a cyber incident — and to escalate that complaint to the NSO if the provider’s response is not satisfactory.