Skip to content

ReadyTech VETtrak Cyber Incident

Update: Monday 11 November 2025

Investigations have found no indication that Tasmanian Government data was affected in the ReadyTech VETtrak cyber incident. 

Tasmanians should be alert to potential scams. Some cyber criminals may use this cyber incident as an opportunity to make unsolicited contact.      

If you believe you have been subject of a scam, please visit Report Cyber at www.cyber.gov.au/report-and-recover   

Specific enquiries relating to this incident should be directed to ReadyTech at cybersafe@readytech.io   

Update: Tuesday 4 November 2025 

The Tasmanian Government are aware a malicious actor published data related to the cyber incident on 31 October 2025. 

We are continuing to work with ReadyTech and the Australian Government to understand what risk there is of Tasmanian data being exposed.   

At this stage there has been no notification of any Tasmanian Government disclosure.    

Tasmanians should be alert to potential scams. Some cyber criminals may use this cyber incident as an opportunity to make unsolicited contact.     

We will continue to provide updates as more information becomes available.    

Specific enquiries relating to the claims should be directed to ReadyTech at cybersafe@readytech.io    

Update: Wednesday 29 October 2025

The Tasmanian Government is aware of a reported cyber incident impacting ReadyTech and its VETtrak system.  

The VETtrak student management system is used by the Department for Education, Children and Young People, Tasmania Fire Service, State Emergency Service, and the Department of Health to manage vocational education and training records.

We are working with ReadyTech and the Australian Government to understand what risk there is of Tasmanian data being exposed.  

At this stage there is no evidence of any Tasmanian disclosure.   

Tasmanians should be alert to potential scams. Some cyber criminals may use this cyber incident as an opportunity to make unsolicited contact.    

It is recommended that you do not respond to unsolicited contact in relation to this incident. 

We will continue to provide updates as more information becomes available.   

Specific enquiries relating to the claims should be directed to ReadyTech at cybersafe@readytech.io  

If you believe you have been subject of a scam, please visit Report Cyber at www.cyber.gov.au/report-and-recover  

Frequently Asked Questions

ReadyTech, a third-party software provider, has reported a cyber incident involving its VETtrak platform, a system used by several Tasmanian Government agencies to manage vocational education and training records. 

The VETtrak system is used by the Department for Education, Children and Young People (DECYP), Tasmania Fire Service (TFS), State Emergency Service (SES), and the Department of Health (DOH) to manage vocational education and training records.

The system holds vocational education and training records, including personal details such as names, contact information and course enrolments.  

At this stage, there is no evidence that Tasmanian Government data has been accessed or compromised. 

The Tasmanian Government is coordinating a whole-of-government response with the affected agencies and ReadyTech. We are sharing information across agencies, assessing operational impacts, and ensuring consistent communication and support for those potentially affected. 

If any Tasmanian data is confirmed as impacted, affected individuals will be contacted directly and offered appropriate advice and support. 

No. There is no evidence that any Tasmanian Government internal systems have been affected. 

Tasmanians should be alert to potential scams. Some cyber criminals may use this cyber incident as an opportunity to make unsolicited contact.    

Following any cyber incident, Tasmanians should be wary of any unsolicited contact. Hang up and call back on a phone number you have sourced independently. 

It is recommended that you do not respond to unsolicited contact in relation to this incident. 

If you believe you have been subject of a scam, please visit Report Cyber at www.cyber.gov.au/report-and-recover

No, ReadyTech has taken out an injunction against any access to, disclosure of, or dissemination of data involved with the cyber incident and individuals should not seek to access the data themselves.