A cyber incident at the University of Sydney has resulted in the unauthorized access and download of historical data files containing personal information for approximately 27,500 individuals, including current and former staff, students, and alumni. While no evidence of data misuse has been detected as of late December 2025, cybersecurity authorities warn that such breaches increase the risk of sophisticated, AI-driven impersonation and social engineering scams. The University has secured the affected environment and is in the process of notifying those impacted.