The Australian National University (ANU) has released a detailed incident report of a data breach suffered by the university in late 2018, which was discovered in May 2019, and revealed in June 2019. The report details how the attackers organised four separate spear phishing campaigns, and built their data exfiltration infrastructure on compromised web servers and legacy systems.