Mathspace says it has suffered a data breach affecting more than one million people, including students, school staff, and parents or guardians. Multiple outlets report that the incident involves the exposure of personal information for individuals associated with the company’s education services.
Several sources say the attackers gained access by exploiting an unpatched vulnerability in Mathspace’s self-hosted Metabase internal reporting system. Help Net Security reports that the flaw allowed attackers to obtain administrator access without legitimate login credentials. SecurityWeek and Bleeping Computer also describe the breach as involving data theft from a self-hosted Metabase instance.
Other coverage focuses more broadly on the scale and who is affected. ABC Australia and local papers report the breach spans across Australia and New Zealand, mentioning affected groups such as students, parents, and teachers. Across outlets, the common thread is the confirmed impact figure and the involvement of the Metabase system, while details about the specific vulnerability and access method are described more explicitly by some technical reporting.
