Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Western Sydney University contractor costs blow out to $53 million following a string of data breaches.
Western Sydney University’s vice chancellor has revealed the spiralling costs of dealing with a string of cyber incidents that impacted the institution throughout 2024.
Speaking in front of a Senate inquiry investigating the quality of governance in higher education, Professor George Williams said that contractor costs following the incidents had been significant.
“The university has been badly impacted by a number of attacks,” Williams said.
“I can’t say too much because the threat actor is currently before the courts and has been arrested by the police, but we needed to engage high levels of consultant support for forensic cyber work in many millions of dollars.”
In fact, the university’s spending on contractors totalled $36 million in 2024 and $17 million so far in 2025, with cyber security costs the main contributor.
The University of Western Sydney issued an updated advisory last month outlining the impact of the 2024 attacks.
“Our university has been relentlessly targeted in a string of attacks on our network. This has taken a considerable toll on our community, and for that, I am deeply sorry,” Williams AO said in a 28 August statement.
“I’d like to thank the NSW Police who recently charged a former student from the university in relation to cyber offences. As that matter is now before the court, I cannot make any further comment other than to say the university will continue to assist police with their investigations.”
The university was able to confirm the following data had been compromised and had been offered for sale on hacking forums:
Western Sydney University is continuing to work with the National Office of Cyber Security, Australian Federal Police, and the Australian Signals Directorate’s Australian Cyber Security Centre.
Ex-student Birdie Kingston began her hacking career in 2021, when she allegedly altered university systems to provide discount parking. However, her activity soon skyrocketed, and she allegedly accessed the data of around 10,000 students. She was arrested in June 2025.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
Be the first to hear the latest developments in the cyber industry.