Skills Misused: Western Sydney University Student Arrested for Hacking, Altering Grades and Seeking Ransom

• A 27-year-old former student was arrested and charged with hacking Western Sydney University and demanding a ransom
• The cyberattacks began in 2021 and involved altering academic results and threatening to sell student data 
• Birdie Kingston, 27, was denied bail and faces penalties of up to 10 years in prison

Cybercrime Squad detectives have charged a former student with alleged cyberattacks on Western Sydney University. Birdie Kingston, 27, who was studying electrical engineering, is accused of launching a string of cyber intrusions.

A specialised unit within the NSW Police Force charged Kingston with multiple hacking-related offenses targeting Western Sydney University. 

She is accused of stealing GB of data and, on one occasion, demanding over $40,000 in cryptocurrency as ransom from the university."

These cyber attacks affected both university students and staff. Investigators believe Kingston was responsible for several unauthorized actions, including:

• Accessing the university system to exfiltrate sensitive data
• Threatening to sell student information on the dark web
• Unauthorized access to university systems to secure a discount for on-campus car parking
• Modifying her academic grades

She is suspected to have been targeting Western Sydney University since 2021. The incidents were reported to the State Crime Command’s Cybercrime Squad, which promptly established the ‘Strike Force Docker’ 

A team of Strike Force detectives, the AFP Joint Policing Cyber Coordination Centre (JCP3), and cybersecurity experts worked to identify the alleged hacker.

They ultimately identified the alleged hacker as a former student of the university, leading to the discovery of computer equipment and mobile devices at her residence.

The arrest took place at her Kingswood residence on Wednesday, June 25, 2025, after the Strike Force detectives, along with the Northwest Metropolitan Region Operational Support Group, executed a search warrant.

She was arrested and taken to St Marys Police Station. The student now faces 20 cybercrime charges, including:

• Ten counts for modifying restricted data 
• Four counts for modification of data with the intent to cause impairment
• Two counts of unauthorised system function with intent serious offence
• Stealing data with the intent to commit cybercrime
• Dishonestly possessing property for deception
• Obtaining financial information for fraud
• Engaging in deceptive conduct for financial gain
• Demand with malicious intent to cause loss 

Kingston was denied bail and was scheduled to appear in Parramatta Local Court on June 26. Responding to the offences, Detective Acting Superintendent Jason Smith commented, “The demand money offence is in itself quite a serious charge and there are other offences relating to the unauthorised modification of data which carry a penalty of up to 10 years.”