AI in Schools
Two breaches, one cyber insurance read
Digital Attitudes, 16 June 2026
The Tuesday read is the operational paper that lands when last week's two education breaches reach the broker's desk, the rankings tables get the data-side audit they have been overdue for, and the Deloitte job list lands on the TAFE curriculum office.
Cyber insurance prices the two June breaches as a sector signal
Insurance Business Magazine's Jonalyn Cueto published a piece on Wednesday 11 June reading the Reynella East College incident (announced to parents on 9 June) and the R.I.C. Publications data leak (the 116,000 record dump published to a forum on 4 June) as a pair the cyber insurance broker side now treats as a sector pattern. The OAIC numbers carried in the piece: 532 notifiable data breach notifications in the January to June 2025 period (down 10 per cent on the prior six months but still elevated), malicious or criminal attacks responsible for 59 per cent of notifications (308 reports), and an average of just over 10,000 individuals affected per cyber incident. The threat actor "2019" has now claimed 35 leaks in six months, predominantly against Australian organisations. The Insurance Business read names the policy trigger question: the time gap between R.I.C.'s 30 May unauthorised access and the 4 June public disclosure has implications for retroactive cover and discovery-based policy triggers, and the publisher's six-country footprint creates multi-jurisdictional notification obligations the existing cyber policy may not have priced. Insurance Business Magazine on the two education breaches and the cyber insurance read, 11 June.
Why this matters: For independent and Catholic school business managers reading the school's existing cyber insurance schedule against the OAIC Children's Online Privacy Code registering on 10 December, the question the broker will hand back at the next renewal is whether the policy's retroactive date covers the existing supplier list (the R.I.C. order history is the worked example), and whether the data class definition includes the school's own procurement records as personal information under the Code. For state Department of Education CIOs running framework agreements with multiple resource publishers and SIS vendors, the operational read is that the insurer's policy trigger question (when did the access happen versus when was it disclosed) is the same question the department's own incident response runbook has to answer for any breach in the supplier chain, and the chain is what the threat actor 2019 has been working since January. For ed-tech vendors selling subscription content into Australian schools, the procurement signal Cueto sharpens is that the buyer's cyber insurance schedule is now an evaluation criterion alongside the product roadmap, and the vendor whose own customer data file cannot be shown to the broker is in a different conversation than the one the renewal cycle was originally written for.
Calderon argues universities should treat rankings as data, not marketing
RMIT Director of Strategic Insights Angel Calderon published a piece in Future Campus on Sunday 14 June arguing the proliferation of global university rankings (more than 15 schemes) has outrun the methodological scrutiny those rankings deserve, and the Australian sector's response should be to read the data behind the rankings rather than the league table position. The data Calderon stands on: Australian universities' Q1 publication output grew 11 per cent between 2024 and 2025 (against a 5 per cent prior baseline), overall scholarly output rose 4 per cent reversing pandemic era decline, and the share of Highly Cited Researchers remained stable over the eight years of measurement (Australia fifth globally). Research completions rose 8 per cent from 10,359 (2020) to 11,145 (2024), 42 per cent international. Calderon's capstone: "Rankings abound and with it comes good and bad data. It is up to us to sift through the noise and look at the patterns that emerge from all of them." Future Campus on the Calderon piece, 14 June.
Why this matters: For vice-chancellors and DVCs (Research) writing the institution's 2027 strategic plan against the ATEC commencement on 1 July, Calderon's argument is the methodological frame the next plan paper has to commit to, because the institution that writes the plan against one ranking scheme is the institution whose research office spends the year answering for a methodology it does not control. For Pro VCs (Education) and university planning offices, the Q1 publications growth is the data line that reads against the "the universities are in crisis" framing landing in the trade press all year, and the institution's own annual report is now a defensible counterpoint to the league table the marketing office is otherwise working from. For ed-tech vendors selling research analytics products into the Australian university market (Scopus, Web of Science, Dimensions, the institutional research intelligence suites), Calderon's piece is the procurement read that the buyer's analytics question is now public, and the next contract conversation is about how the platform reads the methodology rather than how it scores the institution.
Deloitte names ICT trainers on the AI disrupted list
Deloitte Access Economics' Employment Forecasts for June 2026, covered by Information Age on Tuesday 9 June, identifies 82 "AI disrupted" occupations expected to see reduced demand alongside a list of "AI enhanced" roles expected to grow. The tech roles named on the disrupted list: ICT trainers, software programmers, database administrators, test engineers, ICT sales professionals. The employment growth forecast for AI disrupted occupations: 0.5 per cent annually over the next five years (against 1.9 per cent historically). Annual employment growth in April 2026 was 0.9 per cent (down from 1.9 per cent over the prior three years), and overall employment growth is forecast to decline from 2.1 per cent in 2024 to 2025 to 1.1 per cent in 2026 to 2027. David Rumbens at Deloitte: "Limited evidence of widespread job losses could suggest that AI is currently playing more of an augmentative role." Information Age on the Deloitte forecast, 9 June.
Why this matters: For TAFE NSW, TAFE Queensland and TAFE WA directors writing the term 3 ICT training course catalogue against the Deloitte list, the operational read is that the role the TAFE is enrolling new students into (ICT trainer, software programmer, test engineer) is on the disrupted list the report names, and the curriculum the TAFE writes for term 3 has to answer what the AI enhanced version of the role actually looks like. For university Pro VCs (Education) writing the 2027 IT and computing course refresh against the ACS ICT enrolment decline of the last two years, the question Deloitte hands the committee is whether the degree certifies the role that is shrinking (entry level software programmer) or the role that is growing (the human in the loop on AI driven systems), and the case file the next course accreditation will be read against is the one the Deloitte data sketches out. For ed-tech vendors selling AI assisted coding tools and computing curriculum into Australian secondary schools and TAFE (the GitHub Copilot for education sketches, the Codecademy enterprise plans, the Cursor for education conversations), the procurement question Deloitte sharpens is that the buyer is now reading the product against a labour market forecast that says the role the product trains for is the role the buyer's own employer side is no longer hiring at the historical rate.
The Tuesday thread is that the operational paper for the cyber insurance read, the data side read on the rankings, and the labour market read on what to teach are all asking the same question of the institution's procurement desk this morning: does the policy, the methodology, and the curriculum actually price the risk the system has spent the last year accumulating? More on the operational read at digitalattitudes.com.au.