Data breach exposes private information of Moreton Bay residents

Residents of Moreton Bay, Australia, were alarmed to discover that their private information had been accidentally published on the Moreton Bay Council’s official website. The exposed data included names, residential addresses, email addresses, phone numbers, resident complaints to the council, and details of council investigations.

The breach was uncovered by resident Piper Lalonde, a data analyst, and her husband, who found their details and complaints freely accessible on the council’s customer request online portal. The couple discovered that their phone numbers, complaints, requests for new bins, and GPS coordinates of the requests were available online. Further investigation revealed that the personal information of some of their friends and neighbors was also exposed.

Piper immediately reported the breach to the council, leading to the website being taken down the following day. Despite this, she expressed dissatisfaction with the lack of formal notification to affected residents. She emphasized the importance of informing those impacted, stating, “I would expect they’d have to send out some formal communication letting people know their information was publicly accessible, but there was no indication they were going to do that.” Piper also voiced concerns about the potential misuse of the information, especially if complaints about individuals were discovered.

In response to the breach, the Moreton Bay Council issued an official notice on their website, which remains partially functional with some services limited. The notice stated that their third-party provider is investigating the incident, and there is no evidence to suggest a cyber attack. The council assured residents that no unsolicited calls requesting sensitive information would be made and that no action is required from them at this stage.

The full extent of the data breach and its impact on residents is currently unknown, including how many individuals accessed the data before the website was temporarily taken down.