-
Research at UWA
-
Courses and programs
-
Research institutes and centres
-
News and media
-
Faculties & schools
-
Highlights
-
Governance
-
Chancellor
-
Vice-Chancellor
-
Executive
-
History of the University
-
Faculties & schools
-
Campuses
-
Complaints
-
Offical publications
-
Communications and marketing
-
Working at UWA
-
Arts, Business, Law and Education
-
Science
-
Engineering and Mathematical Sciences
-
Health and Medical Science
-
School of Indigenous Studies
-
Graduate Research School
Computer theft / Data-loss notification
In late June, a break-in occurred at a UWA administration building and thieves stole a number of University-owned password-protected laptops. The University and the Western Australian Police have been investigating the break-in and due to the theft of the laptops, and the possible risk of attempted unauthorised access, we are treating this as a data loss incident.
-
A Message from the Vice-Chancellor
Dear UWA community
In late June, a break-in occurred at a UWA administration building and thieves stole a number of University-owned password-protected laptops. The University and the Western Australian Police have been investigating the break-in and due to the theft of the laptops, and the possible risk of attempted unauthorised access, we are treating this as a data loss incident.
What personal information was involved?
UWA has identified that across the laptops there was fragmented data relating predominantly to people who applied to study at UWA between 1988 and January 2018. The bulk of this data relates to Australian citizens or residents and includes tax file numbers (TFN) and student identification numbers, and in these cases while some names and contact information are spread across the laptops, they are not directly linked to the TFNs or student IDs.
Separately, and in varying degrees of completeness, there are also details across the laptops from applicants who may have provided the University with information such as names, dates of birth and passport numbers to obtain a confirmation of enrolment (CoE).
No credit card details, bank information or medical records are included and there is no indication that any data has been accessed or used.
Following the theft, and as a precaution, the University has reset user login passwords and made it impossible for the stolen laptops to connect to the UWA network. Police investigations into the break-in are ongoing, and the University is continuing efforts to track the stolen equipment.
Steps to consider
As with the theft or loss of a personal phone or computer, we recommend that you take standard precautionary steps such as considering the security of your present passwords and as always, remain vigilant for suspect or phishing emails.
The University will continue to update this site.
Who to contact for more information
All theft is disconcerting and we acknowledge that this incident may cause concern for some people. Should you have further questions, please email info@uwa.edu.au or call (AUS) +61 1800 518 018 (Monday to Friday, 9am - 6pm, AWST), or (UK) +44 800 069 8762 (Monday to Friday, 9am - 6pm, UTC +1)
Please be assured that the University takes theft, our ongoing digital security, and our relationship with all students very seriously, and this is why we have made contact with you on this issue.
I wish to assure you again that no credit card details, bank information or medical records are included in this theft and that the University is taking this incident and ongoing digital security very seriously.
Yours Sincerely
Professor Dawn Freshwater
Vice-Chancellor -
Frequently Asked Questions for Domestic Students
What happened?
In late June, a break-in occurred in a UWA administration building and thieves stole a number of University owned password-protected laptops.
What steps has the University taken?
- This incident was immediately reported to the Western Australian Police for investigation.
- UWA immediately commenced an internal investigation to assess the nature of the data stored on the stolen laptops.
- UWA has identified that the laptops contain fragmented data relating predominantly to people who applied to study at UWA between 1988 and January 2018. The bulk of this data relates to Australian citizens or residents and includes tax file numbers (TFN) and student identification numbers, and in these cases while some names and contact information are spread across the laptops, they are not directly linked to the TFNs or student IDs.
- Following the theft, and as a precaution, the University has reset user login passwords and made it impossible for the stolen laptops to connect to the UWA network.
- The University has notified the Office of the Australian Information Commissioner (OAIC) and the Australian Tax Office. Further advice is available from the OAIC website.
- UWA takes theft, our ongoing digital security, and our relationship with all students very seriously. Our team continues to work with WA Police on the investigation of the break in and theft.
What personal information was involved?
There is no indication that any data has been, or will be, accessed or used.
UWA has identified that the laptops contain fragmented data relating predominantly to people who applied to study at UWA between 1988 and January 2018. The bulk of this data relates to Australian citizens or residents and includes tax file numbers (TFN) and student identification numbers, and in these cases while some names and contact information are spread across the laptops, they are not directly linked to the TFNs or student IDs.
No credit card details, bank information or medical records are included.
Police investigations into the break-in are ongoing, and the University is continuing efforts to track the stolen equipment.
Steps to consider
Again, there is no indication that any attempt has been, or will be made, to access laptop data.
If you are not sure whether you have applied to study at UWA between 1988 and 2018 or provided your tax file number, please contact us and we will be able to help you check.
Email: info@uwa.edu.au
Call: Toll free +61 1800 518 018 (Monday to Friday, 9am - 6pm, AWST)
As with the theft or loss of a personal phone or computer we recommend that you take standard precautionary steps such as considering the security of your present passwords and as always, remain vigilant for suspect or phishing emails.
- The University has notified the Australian Tax Office of the computer theft and will provide the ATO with details of affected tax file numbers (TFNs) for monitoring purposes. You can also contact the ATO Client Identity Support Centre on 1800 467 033 (between 8am - 6pm Monday to Friday) to discuss any added security measures.
- Take time to review this useful information from the Office of the Australian Information Commissioner.
- Consider two-factor authentication for use online.
Further steps
- UWA moved quickly to reset passwords where necessary and to make it impossible for the stolen devices to be connected to the University network.
- We have strengthened building and data security where possible.
- UWA has invested heavily in cyber security over the past two years and that investment has helped to reduce our exposure to hackers and to help us detect threats.
What should I do first?
You should carefully assess if you are part of the data loss incident, and should take time to review this useful information from the Office of the Australian Information Commissioner.
What should I do next?
If you applied to study at UWA between 1988 and 2018, and provided your tax file number as part of the application process, you should take the following precautionary measures:
- The University has notified the ATO about the data loss incident and will be securely providing the ATO with details of all tax file numbers (TFNs) so they can be monitored for suspicious activity. You can also contact the ATO Client Identity Support Centre on 1800 467 033 (between 8am - 6pm Monday to Friday) to notify them that your TFN has been compromised. The ATO can apply security measures that will monitor your TFN for any unusual or suspicious activity on your account.
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts.
I am concerned about my tax file number being accessed - what should I do?
The University has notified the Australian Tax Office (ATO) about the data loss incident and provided the ATO with details of all tax file numbers (TFNs) so they can be monitored for suspicious activity.
We also advise you contact the ATO Client Identity Support Centre on 1800 467 033 (between 8am-6pm Monday to Friday) to notify them that your TFN has been lost. The ATO can apply security measures that will monitor your TFN for any unusual or suspicious activity on your account.
How will I know if my data has been accessed and used?
There is no evidence to date that UWA’s data has been accessed or used. However, there are a number of steps that you can take to reduce the risk of the data being used.
- The University has notified the ATO about the data loss incident and will be securely providing the ATO with details of all tax file numbers (TFNs) so they can be monitored for suspicious activity. You can also contact the ATO Client Identity Support Centre on 1800 467 033 (between 8am - 6pm Monday to Friday) to notify them that your TFN has been compromised. The ATO can apply security measures that will monitor your TFN for any unusual or suspicious activity on your account.
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts.
- Take time to review this useful information from the Office of the Australian Information Commissioner.
What do I do if I think there has been suspicious activity with my tax file number?
Please contact the Australian Tax Office Client Identity Support Centre on 1800 467 033 and report any suspicious activity.
The Australian Tax Office has been informed about the data loss incident.
I am worried about identity theft, what should I do?
It is improbable that identity theft would occur because of the data loss incident. However, you can seek specific advice of the Australian Tax Office Client Identity Support Centre on 1800 467 033.
The Australian Securities and Investments Commission provides useful advice on what to do if you are concerned about identity theft.
If you are in Australia or New Zealand, you can seek help from IDCARE. This is a service that provides free advice and confidential support to victims of data breaches and identity theft on 1300 432 273 (Australia) or 0800 201 415 (New Zealand).
You should also remain vigilant for unusual activity in relation to your online services, and be additionally cautious with unsolicited emails or phone calls.
Can I change my TFN?
Please seek the advice of the Australian Tax Office Client Identity Support Centre on 1800 467 033. They will advise you on the circumstances and process to do this, if it is necessary.
How will I know if my data has been lost?
It is difficult to determine if an unauthorised individual will eventually access the data on the stolen laptops, as the intention of the theft is unknown. However, there are a number of steps that you can take to reduce the risk of identity theft and fraudulent activity. Contact your financial institution to advise them of the data loss incident and to discuss any additional protection they can provide.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts including banking.
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
Who can I contact for more information, if I believe I have been affected by this data loss incident?
We have set up a dedicated contact point for anyone seeking more information. If you are concerned, please get in touch with UWA directly for information and support.
Email: info@uwa.edu.au
Call: +61 1800 518 018 (Monday to Friday, 9am - 6pm, AWST)
The University will continue to update this site.
Need further information?
-
Frequently Asked Questions for International Students
What happened?
In late June, a break-in occurred in a UWA administration building and thieves stole a number of University owned password-protected laptops.
What steps has the University taken?
- This incident was immediately reported to the Western Australian Police for investigation.
- UWA immediately commenced an internal investigation to assess the nature of the data stored on the stolen laptops.
- UWA has identified that the laptops contain fragmented data, and as an international student, you may have provided the University with the following information to obtain your confirmation of enrolment (CoE). This data may include:
- Student ID
- Name
- Gender
- Date of birth
- Birth country
- Nationality
- Passport details
- Home address
- Personal email address
- Visa status and number
- Overseas student health cover status and number
- University course details
- Following the theft, and as a precaution, the University has reset user login passwords and made it impossible for the stolen laptops to connect to the UWA network.
- The University has notified the Office of the Australian Information Commissioner (OAIC) and the Australian Tax Office of the computer theft. Further advice is available from the OAIC website.
- UWA takes theft, our ongoing digital security, and our relationship with all students very seriously. Our team continues to work with WA Police on the investigation of the break in and theft.
What personal information was involved?
There is no indication that any data has been, or will be, accessed or used.
UWA has identified that the laptops contain fragmented data relating to international students who applied to study at UWA between September 2014 and December 2018. This data may include:
- Student ID
- Name
- Gender
- Date of birth
- Birth country
- Nationality
- Passport details
- Home address
- Personal email address
- Visa status and number
- Overseas student health cover status and number
- University course details
No credit card details, bank information or medical records are included.
Police investigations into the break-in are ongoing, and the University is continuing efforts to track the stolen equipment.
Steps to consider
Again, there is no indication that any attempt has been, or will be made, to access laptop data.
If you are not sure whether you have applied to study at UWA between 2014 and 2018, please contact us and we will be able to help you check.
Email: info@uwa.edu.au
Call: Toll free +44 800 069 8762 (Monday to Friday, 9am - 6pm, UTC +1)
As with the theft or loss of a personal phone or computer we recommend that you take standard precautionary steps such as considering the security of your present passwords and as always, remain vigilant for suspect or phishing emails.
- Take time to review this useful information from the Office of the Australian Information Commissioner.
- Consider two-factor authentication for use online.
Further steps
- UWA moved quickly to reset passwords where necessary and to make it impossible for the stolen devices to be connected to the University network.
- We have strengthened building and data security where possible.
- UWA has invested heavily in cyber security over the past two years and that investment has helped to reduce our exposure to hackers and to help us detect threats.
What should I do first?
You should carefully assess if you are part of the data loss incident, and should take time to review this useful information from the Office of the Australian Information Commissioner.
What should I do next?
If you applied to study at UWA between 2014 and 2018, you should take the following precautionary measures:
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts.
How will I know if my data has been accessed and used?
There is no evidence to date that UWA’s data has been accessed or used. However, there are a number of steps that you can take to reduce the risk of the data being used.
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts.
- Take time to review this useful information from the Office of the Australian Information Commissioner.
I am worried about identity theft, what should I do?
It is improbable that identity theft would occur because of the data loss incident. If you are in Australia or New Zealand, you can seek help from IDCARE. This is a service that provides free advice and confidential support to victims of data breaches and identity theft on 1300 432 273 (Australia) or 0800 201 415 (New Zealand).
You should also remain vigilant for unusual activity in relation to your online services, and be additionally cautious with unsolicited emails or phone calls.
How will I know if my data has been lost?
It is difficult to determine if an unauthorised individual will eventually access the data on the stolen laptops, as the intention of the theft is unknown. However, there are a number of steps that you can take to reduce the risk of identity theft and fraudulent activity. Contact your financial institution to advise them of the data loss incident and to discuss any additional protection they can provide.
- Monitor financial transactions for any suspicious or unexplained behaviour.
- Ensure you have two-factor authentication on your online accounts including banking.
- Be extra vigilant when receiving unsolicited emails, phone calls and text messages and avoid providing personal and financial information if requested.
Who can I contact for more information, if I believe I have been affected by this data loss incident?
We have set up a dedicated contact point for anyone seeking more information. If you are concerned, please get in touch with UWA directly for information and support.
Email: info@uwa.edu.au.
Call: Toll free +44 800 069 8762 (Monday to Friday, 9am - 6pm, UTC +1) if you are outside Australia or 1800 518 018 (Monday to Friday, 9am - 6pm, AWST) if you are in Australia.
The University will continue to update this site.
Need further information?
- Australian Taxation Office and other government agencies
-
Contact information
Who can I contact for more information, if I believe I have been affected by this data loss incident?
We have set up a dedicated contact point for anyone seeking more information. If you are concerned, please get in touch with UWA directly for information and support.
Domestic Students
Email: info@uwa.edu.au
Call: +61 1800 518 018 (Monday to Friday, 9am - 6pm, AWST)International Students
Email: info@uwa.edu.au
Call: Toll free +44 800 069 8762 (Monday to Friday, 9am - 6pm, UTC +1) if you are outside Australia or 1800 518 018 (Monday to Friday, 9am - 6pm, AWST) if you are in Australia.The University will continue to update this site with new information as it becomes available.