University Student Charged for Alleged Hacking and Data Theft

A 27-year-old former student of Western Sydney University has been charged with a string of cyber offences, following an extensive investigation into a series of cyber attacks that have plagued the institution since 2021.

The arrest comes after a coordinated operation by the NSW Police Cybercrime Squad under Strike Force Docker, working in partnership with federal agencies and cybersecurity experts.

Police allege the cyber attacks began as an attempt to exploit university systems for unauthorised discounted parking on campus.

 However, the offending escalated dramatically, with the former student allegedly gaining unauthorised access to restricted data, altering academic results, and ultimately threatening to sell confidential student information on the dark web.

It is estimated that hundreds of university staff and students were affected by these breaches, which involved data exfiltration, system compromise, and misuse of university infrastructure.

The attacks not only disrupted operations but also raised concerns about the safety and privacy of sensitive academic and personal information.

The investigation was launched after Western Sydney University reported a series of suspicious incidents, including unauthorised access and threats involving student data.

The matter was referred to the State Crime Command’s Cybercrime Squad, which established Strike Force Docker to lead the inquiry.

Detectives, in close cooperation with Western Sydney University, the AFP Joint Policing Cyber Coordination Centre, and other cyber security specialists, identified the alleged perpetrator as a former student of the university.

On the morning of Wednesday, 25 June 2025, police executed a search warrant at a Kingswood residence with the support of the Northwest Metropolitan Region Operational Support Group.

During the search, officers seized computer equipment and mobile devices believed to have been used in the commission of the offences. The woman was arrested at the scene and taken to St Marys Police Station.

She has been charged with 20 offences, including ten counts of accessing or modifying restricted data, four counts of unauthorised modification of data with intent to cause impairment, two counts of unauthorised function with intent to commit a serious offence, as well as offences involving deception, attempted financial gain, and demanding with menaces. 

The accused was refused bail and appeared in Parramatta Local Court on Thursday, 26 June 2025.

Western Sydney University has expressed gratitude for the support of NSW Police, noting the significant impact the cyber incidents have had on the university community.

Investigations under Strike Force Docker are ongoing, as authorities continue to assess the full extent of the breaches and their consequences.

Find this News Interesting! Follow us on Google News, LinkedIn, and X to Get Instant Updates