Student names, addresses, visa applications and scans of passports are just some of the details that have been leaked online following a ransomware attack on Australian migration agent and education consultancy, Aussizz Group.
In early April, ransomware gang DragonForce published 278.91GB of stolen data from Aussizz clients, including students. Other details in the thousands of records that have been leaked include email addresses, courses enrolled in, ID cards, pay slips, college transcripts and skills assessments.
Although Aussizz has published two updates about the cyber security incident on its website, on 19 and 29 April, it is yet to confirm the leak, stating in both updates: “We are aware of claims that cyber criminals have stolen and published data relating to Aussizz.”
The most recent update on 29 April also states that “We are working with external experts to verify and understand what data has been impacted. Should our investigations reveal that the impacted dataset includes personal information, we will notify affected individuals and provide the necessary support in accordance with our obligations.”
Aussizz has also set up a Cyber Security Resources Hub to provide updates on the investigation and advice about remaining cyber safe.
Aussizz Group was established in India in 2009 as a migration agent and education consultancy, and claims to have assisted over 180k clients in achieving their immigration and educational goals. It has offices throughout Australia, as well as in India, UAE, Hong Kong, Canada and Sri Lanka.
