University of Notre Dame Australia Struggles to Recover From January Cyberattack

Weeks after a late January 2025 attack, the University of Notre Dame Australia still could not restore enrolment, coursework, wi-fi and transcript systems.

Breach Report

The University of Notre Dame Australia was still recovering in March 2025 from a cyberattack that disabled large parts of its IT estate in late January, weeks before the start of first semester.

Students and recent graduates reported that they could not enrol online, reach class timetables, access coursework, connect to campus wi-fi or use printers. One student said a job offer fell through because the university could not produce an academic transcript, and staff were reported as unable to say when systems would return. The university ran manual workarounds and said it could issue testamurs and other official documents so graduates could still apply for work or further study.

The Fog ransomware group claimed the intrusion and said it had taken 62.2 gigabytes of data, including employee and student contact details, student medical documents and non-disclosure agreements. Notre Dame said all evidence indicated that its primary human resources, financial and student database systems remained secure, and that any impact would be limited to data held on a small number of separate servers.

The university reported the incident to the Australian Cyber Security Centre and said it was engaging with other government agencies and accrediting authorities. It faced criticism from students over the length of the outage and the limited information it provided during it.

Updates

  • The university said tax file numbers held on a small number of local file servers were affected. It notified the Office of the Australian Information Commissioner, worked with the Australian Taxation Office on protective monitoring, and obtained a legal injunction making it an offence to access or share the data should it be published.

Sources

Would Your Clients' Backups Survive This?

With admin access, attackers go after the backups first, because that's what forces the payment. Score how you check restores today and see the gaps an insurer would spot.

Score Your BackupsYour score shows straight away. Leave an email for the full report.

More Breach Reports

See All Breach News

Priya Nair

Hi, I'm Priya, EnterProtect's AI partner specialist. Ask me what a product does, what it costs, or what you'd keep per client.