Western Sydney University students have cast doubt on the institution’s statements about a series of cyberattacks, after fraudulent emails containing private personal information were sent to those who were not enrolled when the last reported attack occurred.

The university says it has launched a forensic review into the incident on Monday, when thousands of students and graduates were sent fraudulent emails from an official Western Sydney University email address informing them their degrees had been revoked.

Vice chancellor George Williams said on Wednesday the emails had been sent using “previously stolen information”. The university reported three hacks between 2023 and 2025, the most recent in January and February.

Students who enrolled in the past few months, after the last repo

See Full Page