Australian Home Affairs Department accidentally leaks data of security report participants

The Australian home affairs department found itself in an embarrassing situation after accidentally exposing the personal information of participants who took part in the Understanding Small Business and Cyber Security study.

The incident came to light when the media unveiled the data breach, which affected approximately 50 business owners and employees involved in the government cybersecurity report.

This sensitive information was mistakenly published on the parliament website in response to a query posed by James Paterson, the shadow cybersecurity and home affairs minister. The leaked data included the participants’ names, business names, phone numbers, and email addresses.

The home affairs department spokesperson acknowledged the inadvertent data release and asserted that they were aware of the potential breach. The department is reportedly contemplating reaching out to the impacted individuals under its obligations under the Privacy Act.

The cybersecurity report was developed as part of Australia’s Cyber Wardens program, a government-backed initiative to enhance cybersecurity awareness and capability among small businesses. Launched in response to significant breaches at major firms like Optus and Medibank, the multimillion-dollar Cyber Wardens program seeks to fortify cybersecurity measures nationwide.

In the wake of this data leak, James Paterson wasted no time blaming the government, pointing out the irony of such a breach occurring in response to a question about improving cybersecurity for small businesses, particularly from a department whose minister had publicly criticized Optus during a similar data breach incident caused by a criminal gang.

While recent data breaches at companies like Optus and Medibank have already raised concerns, Paterson expressed heightened alarm over the potential implications of a government department or agency losing such sensitive data. The scale of this inadvertent data release could exacerbate the severity of the situation, considering the confidential nature of the information involved, he said.