# WSU LEAK 01: Project Blue
## Can Western Sydney University be trusted to protect your information?
They cant even protect there own information.
It took WSU 4 months to find my previous public post on a very popular dark web site.
## Link
* uploadnow(.)io/s/a6efe1f7-1064-4fb5-b428-412c20b969ae
* www.fileconvoy(.)com/dfl.php?id=gd0c30f4fc861fb7c100059658241625b52c7f8c83a
##
WSU's internal "project blue" documentation regarding its 2023–2025 cybersecurity initiatives are included in this archive.
There were dozens of SharePoint sites downloaded, this being only one.
In 2020–2025, I attacked WSU so frequently that I've lost count and even forgotten about a few.
Viewing emails submitted to IT security reminded me of an attack I had carried out prior to to the SMS attack that i did not recall.
##
WSU utilized these actions as justification in 2023 to get NSWPF to execute a search warrant against a student they already harbored animosity toward.
Police did not find any evidence, but that did not stop WSU from naming them as a defendant to a supreme court order in 2024 and then quickly reaching an agreement to have them removed.
Maybe I'll share that student's account of what transpired as well, as they sufferred hate crimes from WSU employees for their disability and identity.
That student and others living with them at the time are either directly or indirectly involved in WSU's Student Representative Council.
They've won awards both before and after the warrant for their contributions to WSU's community.
## Did WSU want the most recent attack to occur?
In 2024, CyberCX instructed WSU to reset the password for the AD account `SPAdmin`, A service account assigned `user admin` and `sharepoint admin` roles in entra.
Until the account was used in an attack in early 2025, WSU decided to disregard the suggestion.
If one capable employee had been involved, this attack might have been avoided.
page 19 of `Project Blue - Confidential folder 2/BLUE/CCX/CyberCX Investigation Report for WSU regarding Isilon Servers v1.0.pdf`
This is a consistent and repeated pattern that I have noticed as they do not learn and do not even try to protect themselves.
## Other Data?
Western Sydney University has a vast amount of stolen data that may be bought.
Check on README.MD inside the archive for a list and contact mail address.
# Suggestions
Suggestions for WSU
* Observe the advise of your experts.
We are aware that you are paying them millions of dollars, the invoices are all here.
If you listen to them, you might be able to save money without firing every employee.
* Quit bringing the police into nonviolent demonstrations against genocide.
Despite your denial, I have copies of the emails.
* Although Okta is a nice start, Keep going, I enjoy a challenge.
This has been my system for longer than it's been your system.
I have better knowledge of this system than you do and I have backdoors in everything.
I can change your admin passwords as easy as i change my phone password
Suggestions for future students
* Don't enroll at the University of Western Sydney. In particular, the cybersecurity course is not to be trusted if they cant employ anyone with the necessary skills in their IT department.
Suggestions for those wishing to follow in my footsteps
* Make use of bssid pinning and purchase a long range WiFi antenna. It saved my life.
Additionally, If you want to hack any WSU staff member, try the password `Western2024Spr` first. Thank Me Later.