Teacher credit card details stolen in school malware attack

He has also been charged with the possession of child abuse material.

The 28-year-old man allegedly stole the credit card details and credentials of at least 41 teachers and staff at a Sydney school using the malware.

Police will allege in court the Matraville man's malware was in "various stages of development and deployment".

"The Department of Education cyber team have a robust system able to detect these types of offences, and it's through their diligent work that this issue was reported early, and the offender detained quickly," NSW Police detective superintendent Matt Craft said.

The man's phone and laptop were seized on March 4 after police were notified by the Department of Education that disruptive software had been detected in February 2024.

Police allegedly found child abuse material on his phone during their search.

Child abuse material is "nude or sexual images or videos of children under 16", Australian Federal Police said.

NSW Police said the material was "not linked to the school or any students".

"Teachers and staff at our schools are in a position of responsibility and privilege; and anyone that abuses that position will be dealt with accordingly by law enforcement," detective superintendent Craft said.

Police arrested the school employee at 9.25am on March 26 and he was charged with unauthorised modification of data with intent to cause impairment, possessing identity information, two counts of unauthorised function with intent to commit a serious offence and possessing child abuse material.

He was granted bail and will appear before Waverley Local Court on May 8, 2024.

Anyone with information that may assist investigators is urged to contact Crime Stoppers: 1800 333 000 or https://nsw.crimestoppers.com.au. Information is treated in strict confidence.