Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
A number of Tasmanian government agencies have been impacted by the cyber incident involving the vocational student management platform, VETtrak.
Owned by ReadyTech, VETtrak announced that it was suffering an outage impacting “multiple services” on 16 October.
By 17 October, the company had identified that a cyber attack had impacted the VETtrack student management platform.
“We have isolated the platform as a precautionary measure and have engaged external experts to assist with managing the issue,” it said.
“Our technical teams and specialist experts are actively investigating the nature and cause of this issue and working diligently to restore services. Customer access to the platform will remain temporarily unavailable. We expect this to continue throughout Friday (17th October).
“We are working diligently to restore services as quickly and carefully as possible. We will keep you regularly updated on progress. The next update will be provided here at 1:00pm AEDT.”
Now, the Tasmanian government has revealed that a number of agencies that use VETtrak, such as the Tasmanian Department for Education, Children and Young People, the health department, and the fire and services department, have been impacted. It is unclear if the named departments are the ones impacted.
The government said there was currently no evidence that any student information had been accessed.
However, ReadyTech confirmed on 24 October that some documents had been published on the dark web.
“The company has today become aware that a cyber criminal has published a small number of documents containing personal information, originating from the platform,” adding that it urges that nobody attempt to access the platform.
“The company is responding to this recent development and is taking appropriate steps. The company has updated the Australian National Office of Cyber Security as well as other relevant government agencies.”
While not yet confirmed by Cyber Daily, an anonymous source has hinted that VETtrak had received a ransom note from the Lynx ransomware gang.
While there is no mention of VETtrak on the threat actor’s dark web leak site, Lynx has listed a company called OzSoft, a company that appears to have been the original owners of the VETtrak system.
OzSoft was sold in 2015 to California Investments and Simonds Family Office.
Be the first to hear the latest developments in the cyber industry.