June 2025 Data Breach

Our office server was impacted by Cybercrime on in the early hours of Friday 6th June 2025. Please read the information below to see our communications with stakeholders as well as the latest updates about our response to this breach.

UPDATE - Friday 8 August

On 6th June 2025, shortly after 2:00am, an unauthorised party gained access to Condell Park Christian School servers.  The unauthorised party proceeded to encrypt the files on the servers, which finished at about 7:30am.  The unauthorised party then cleared several logs from our servers before finally shutting them down.

It would have been impossible for them to take copies of all the files in this time frame.  It's possible they may have taken a selection of files, but we can be confident they didn't take all of the files.

Furthermore, as of the 8th of August, the unauthorised party has made no contact and has provided no evidence of having taken any files.

We have notified the Office of the Australian Information Commissioner (OAIC) of this possible data breach, and we have completed all requests and actions from them. 

While our investigation into this incident has now concluded, we are continuing to strengthen our cybersecurity to reduce the chances of a similar situation in the future.

Please feel free to contact the School Office if you have any questions or require further information.

  • Letter to Current School Community

    This letter was sent to the current school community on 12 June 2025.

  • OAIC Submission

    This is a record of our submission to the Office of the Australian Information Commissioner made on 26 June 2025.

  • Letter to Former Staff

    This letter was sent to vulnerable former staff on 30 June 2025.