Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Mathspace Metabase data leak affecting 1,079,819 people

Data Leak
First reported
Last updated
Happening score
H score 39
1 unique sources, 1 articles

Summary

Hide ▲

The Mathspace data leak exposed personal information for 1,079,819 students, staff, and parents or guardians in Australia and New Zealand, creating follow-on account-targeting risk. Attackers reached the company's Metabase internal reporting system and downloaded data after gaining unauthorized access. The compromise was confirmed on 2026-09-03, with access dating to 2026-08-10 and download activity on 2026-08-27. The stolen set did not include passwords, authentication tokens, or SSO credentials.

Related Happenings

RingCentral ShinyHunters data leak

Data Leak
H score57 First: 14.08.2026 13:52 Last: 14.08.2026 13:52 Sources 1

About this happening: The ShinyHunters group published a 280GB archive of stolen RingCentral data on a dark web leak site after a ransom demand was refused, turning a July 2026 breach into...

Open Happening

Framework customer data leak from compromised Metabase instance

Data Leak
H score35 First: 07.08.2026 23:14 Last: 07.08.2026 23:14 Sources 1

About this happening: Framework confirmed a customer data leak after attackers compromised its Metabase instance, exposing personal and business records tied to customers. The stolen data i...

Open Happening

Infinite Campus hit by data theft breach linked to ShinyHunters

Incident
H score51 First: 15.06.2026 15:38 Last: 15.06.2026 15:38 Sources 1

About this happening: Infinite Campus suffered a Salesforce data theft breach that exposed more than 137,000 school staff accounts, putting staff contact and account data at risk. The compr...

Open Happening

DentaQuest 2.6 million-account data leak

Data Leak
H score65 First: 04.06.2026 21:36 Last: 04.06.2026 21:36 Sources 1

About this happening: DentaQuest's public leak exposed records for 2.6 million accounts, putting personal and health-related data at risk. The leak followed ShinyHunters' claim to h...

Open Happening

Charter Communications hit by network compromise linked to ShinyHunters

Incident
H score70 First: 26.05.2026 22:46 Last: 26.05.2026 22:46 Sources 1

About this happening: Charter Communications confirmed a data breach tied to ShinyHunters extortion, with the company saying it is alerting authorities and that no sensitive personal...

Latest development: 29.05.2026 11:29

Have I Been Pwned analyzed leaked Charter Communications data and confirmed that the incident affected 4.9 million accounts, with exposed records including names, email addresses, job titles, phone numbers, and physical addresses. The published data also included a subset of about 85,000 records from an internal employee directory.

Open Happening

Timeline

  1. 07.09.2026 16:05 1 articles · 2h ago

    Attackers gain administrator access to Mathspace's Metabase system

    Exploitation Observed

    Attackers gained access to Mathspace's self-hosted Metabase internal reporting system on August 10, 2026 by exploiting a security vulnerability that allowed administrator access without a legitimate login.

    Show sources
    Open in new tab
  2. 07.09.2026 16:05 1 articles · 2h ago

    Attackers download data from Mathspace's Australian reporting database

    Victim Impact Update

    Attackers downloaded data from Mathspace's Australian reporting database on August 27, 2026 after already gaining access to the company's Metabase reporting environment.

    Show sources
    Open in new tab
  3. 03.09.2026 03:00 2 articles · 4d ago

    Mathspace confirms unauthorized access and data theft affecting 1,079,819 people

    Initial Disclosure

    On September 3, 2026, Mathspace confirmed that unauthorised parties had accessed its internal reporting system and downloaded information on students, parents or guardians, and school staff; the company said 1,079,819 people in Australia and New Zealand were affected and warned affected users to watch for suspicious account-related activity.

    Show sources
    Open in new tab