Mathspace Data Breach Affects Over 1 Million Users in Australia and NZ

Mathspace, an online tutoring platform, confirmed a data breach affecting 1,079,819 users in Australia and New Zealand on September 3, 2026. Unauthorized parties accessed an internal reporting system due to an unpatched vulnerability in their self-hosted Metabase installation. The breach exposed names, email addresses, user IDs, and account details, but did not compromise passwords or academic records. The unauthorized access occurred between August 10 and August 27, 2026, with the vulnerability disclosed on August 6. Mathspace has since taken the compromised system offline and is investigating the incident. Users are advised to be cautious of potential impersonation attempts and to verify unexpected communications. The company has notified relevant authorities and is working on contacting affected individuals.

Key Points: • Over 1 million users affected by Mathspace data breach. • Attackers exploited an unpatched vulnerability in Metabase. • No passwords or academic records were compromised.