Teollimi

Mathspace data breach

Was I affected?

Mathspace confirmed a breach affecting about 1.1 million people, exposing names and email addresses. You may be affected if you, or your child, used Mathspace through a school in Australia or New Zealand, as a student, parent or guardian, or teacher.

Mathspace breach facts
AnnouncedSep 5, 2026
When it happenedAugust 10–27, 2026; confirmed September 3, 2026
CountryAustralia
People affected1.1 million
Data exposedNames, Email addresses and Other details
StatusConfirmed by the company or a regulator filing

What happened

Sydney-based online maths platform Mathspace said that on September 3, 2026 it confirmed attackers had accessed an internal reporting system and downloaded information on students, parents or guardians, school staff and its own staff. The attackers exploited a vulnerability in its self-hosted Metabase reporting software, gaining access on August 10 and downloading data on August 27. A total of 1,079,819 people in Australia and New Zealand were affected. The data included user IDs, usernames, first and last names, email addresses, country, time zone, user type and account activity dates. Mathspace says no academic records, results, passwords, password hashes or login tokens were exposed.

What should I do?

  1. Watch for phishing emails that use your or your child's name and mention Mathspace or the school, and don't click links in unexpected messages.
  2. Treat unexpected password-reset emails or account-change alerts with care, and check them by signing in to Mathspace directly.
  3. Read Mathspace's official notice or contact your school for details on what was held about you.
XRedditWhatsApp

More data breaches in Australia →

Check the other services you use →

Sources