Apparent massive data breach affects USyd clubs including SASS, SUEUA, Wesley College

Social media reports have emerged that society management platform ‘Get’ may hove lost the data of more than 50,000 students, including thousands of students at the University of Sydney.

code-coding-conceptual-270360.jpg

The platform has been used by USyd’s Arts, Science, and Engineering faculty clubs, as well as Wesley College, St John’s College, the Sydney Marketing Society, Sydney Uni Cricket Club, and more.

Data was allegedly available through the platform’s API, making the phone numbers, email addresses, dates of birth, and Facebook IDs of the platforms more than 50,000 users available to anyone.

Get claims to be “Australia's most popular app for student societies to collect money from a group” with over 150,000 students as members of the more than 400 societies that use the app. Launched in 2017, it has raised millions in venture funding to support its growth across Singapore, Hong Kong, and Australia.

The Get ‘Security’ page says “customers data are kept for at least 5 years after the termination or closure of their account.”

Get previously suffered from a data breach in 2017.

Get has been contacted for comment.