04 Oct 2023
4 October 2023:
The School can now confirm that it has finalised its response to the cybersecurity incident as required. We thank the community for your support and patience as we worked through the incident response and apologise once again for any concern the incident caused.
Loreto Toorak takes cybersecurity and the protection of personal information seriously and we remain committed to providing guidance and support to affected individuals in response to the incident. If you would like further information on the steps you can take to protect your information against potential misuse, we encourage you to contact us at information@loretotoorak.vic.edu.au or via our dedicated incident phone line on 03 8290 7817.
15 August 2023:
Following our last update on the cybersecurity incident, we confirm that the School is continuing to provide guidance and support to our community. This includes assisting individuals that have queries following notification.
If you have received a notification from the School, please review the information contained in the notification closely and get in touch if you have any further questions. If you have not received a notification, and have questions about whether any of your information may have been involved, we encourage you to reach out to us at information@loretotoorak.vic.edu.au or via our dedicated incident phone line on 03 8290 7817.
The School remains committed to supporting our community through this process. We provide guidance on the steps you can take to protect your information against potential misuse at the following link.
Once again, we would like to thank our School community for your ongoing understanding and support during this time.
1 August 2023:
Following last week's update on our cyber incident investigation, we can now confirm we have issued notifications to individuals whose information may have been involved. We will continue to provide guidance and support to help affected individuals protect their information moving forward.
We understand that receiving these notifications may cause concern, but please be assured that we have no evidence that any personal information has been misused as a result of this incident. Our notification provides detailed information and advice on how individuals can protect their information.
Loreto Toorak takes cyber security and the protection of personal information seriously. We apologise for any concern this incident has caused and we would like to thank our School community for their ongoing support while we conducted a detailed investigation into this incident.
Any further queries should be directed to information@loretotoorak.vic.edu.au or contact us on our dedicated cyber security incident phone line on 03 8290 7817.
17 July 2023:
Loreto Toorak confirms that the investigation into the recent cyber security incident continues. As previously advised, the School engaged leading cyber security experts to undertake a thorough investigation after an unknown third-party gained unauthorised access to a portion of our IT environment.
This detailed investigation is nearing completion, and the School will soon be communicating directly with individuals whose information may have been affected as required. Please be assured that Loreto Toorak will be providing guidance and support to those individuals whose data may have been affected to help them protect their information moving forward.
Loreto Toorak takes cyber security and the protection of personal information seriously. We have notified the Office of the Australian Information Commissioner, the Australian Cyber Security Centre, Victoria Police and the other relevant government agencies to support our response to the incident. We have also introduced additional security measures across our IT environment.
We apologise for any concern this incident has caused and thank you again for your support and patience as we work through the notification process.
7 June 2023:
Our investigation into the recent cybersecurity incident and extent of information accessed remains ongoing. We will provide further updates as and when more information becomes available. We again thank all our staff, parents, families and wider school community for their continued support as we work through this.
31 May 2023:
On 14 May 2023, Loreto Toorak became aware of a cybersecurity incident where an unknown third party gained unauthorised access to a portion of our IT environment.
Upon discovery, we engaged leading external cybersecurity experts to help us secure our systems and investigate the incident.
As a part of this investigation, Loreto Toorak has become aware that a set of data was copied from our IT environment and some of this data has since been disclosed online. Loreto Toorak immediately reviewed the disclosed data and has notified individuals deemed to be at risk. If any further data disclosure occurs, the School will again move swiftly to review the data and directly contact anyone assessed to be at risk.
Our investigation into the incident and the extent of information accessed is ongoing. Separately, the School has notified the Office of the Australian Information Commissioner, the Australian Cyber Security Centre and the Victorian Police about the incident. We will continue to keep these agencies updated as our investigation progresses.
Loreto Toorak takes cybersecurity and the protection of personal information seriously. We are committed to keeping the School community updated as we work to respond to this incident. Additional protections and checks have been put in place to further secure the IT environment and to immediately detect any future unusual activity.
We recommend all our School community remain vigilant against the potential risk of receiving phishing or other scam communications from any parties claiming to be from Loreto Toorak. Please do not respond to any email, telephone or social media communications that seem suspicious.
We apologise for any inconvenience or concern this has caused and thank you for your support and patience.
We will continue to update our website with regular updates on the status of our investigation.