Powered by
MOMENTUM
MEDIA
Personal data may have been compromised in a recent data breach, after more than 600 submissions to the AHRC were accidentally disclosed online.
Editor’s note: This article originally appeared on Lawyers Weekly’s sister brand, Cyber Daily.
The AHRC became aware of the breach on 10 April, when it discovered that attachments uploaded to its complaint web form between 24 March and 10 April had been publicly available – and accessed – between 3 April and 10 April.
“The commission’s best information is that around 670 documents were made potentially accessible in error,” the AHRC said in a 13 May data breach notification.
“Of these, around 100 documents were accessed online, for example by search engines such as Google or Bing. Many of these documents contain personal information. Some documents contain no personal information, and others contain information that is already publicly available.”
The AHRC said it has “taken action to address the disclosure” and petitioned to have the documents removed from the relevant search engines.
“The disclosure was not the result of a malicious or criminal attack. We will provide updated information as our investigations continue,” the AHRC said.
According to the AHRC’s notification, individuals may be affected if they:
At this point in time, the AHRC is working to confirm how many individuals have been impacted by the inadvertent data breach and is continuing to investigate how it occurred and has disabled all web forms on its website.
“The commission has established a task force to respond to the data breach and has taken immediate steps to prevent any further access to the affected documents,” the AHRC said.
“We have treated this data breach with the highest level of concern and are carrying out a thorough and comprehensive investigation and review of the impacted data, with the support of our experts.”
The Office of the Australian Information Commissioner has been informed regarding the data breach.
Login
