St James’ Anglican School (Alkimos WA): unauthorised access; families notified; ThreeAM leak-site listing 28 Sep
St James’ Anglican School (Alkimos, Western Australia) published an incident update dated Monday 14 September 2026 (9:00am): it identified a cyber security incident involving unauthorised access to its computer systems, contained and secured systems, and is auditing. Personal information relating to members of the school community was involved; families were notified with protective steps. The school says it reported to ASD’s ACSC and the OAIC; investigation ongoing; no technical commentary. West Australian / NewsWire reporting (15 Sep) described copied records for current and former students enrolled since 2015 including contact details, bank account details, student medical records and photographs — categories from media, not itemised on the school’s public statement. UPDATE 28 Sep 2026: ransomware.live Australia feed lists stjames.wa.edu.au under the ThreeAM brand (discovered ~28 Sep 18:49 UTC); school statement does not name a threat actor. Primary: school incident-updates page; wire: West Australian / DataBreaches.net 15 Sep; leak-site monitor: ransomware.live.
- Exploited in Australia?
- yes
Primary: St James’ Anglican School — Incident Update (14 Sep 2026) · Vendor: St James’ Anglican School (Alkimos WA) · Ransomware.live Australia — stjames.wa.edu.au / ThreeAM (discovered 28 Sep 2026)