🖥️ Technology — data breaches

Names, email addresses, GPS coordinates, some phone numbers, public forum posts and direct member messages; login details reportedly not included

NZ Privacy Commissioner (notified)

Reported

Facial-recognition biometrics and driver licence scans (claimed by the leak site; unverified), Signatures, home addresses and dates of birth (claimed by the leak site; unverified), Club membership and gaming-machine usage data (claimed by the leak site; unverified)

None reported (NSW Police investigating; OAIC involvement not sourced)

Reported

Home Affairs Free Translating Service client data: full names, dates of birth, mobile and email; visa, driver-licence and passport data (confirmed by the affected client organisation, not ZircoDATA), Archived Monash Health records from its family-violence and sexual-assault support units, 1970–1993 (confirmed by the affected client organisation, not ZircoDATA), Melbourne Polytechnic: about 60,000 students' low-risk identity attributes

OAIC and ACSC (notified); OVIC for Victorian public-sector clients

Reported

Ministry of Justice: ~14,500 coronial files on the transport of deceased people (Nov 2018–Nov 2022) and ~4,000 post-mortem reports (Mar 2020–Nov 2022), Te Whatu Ora: ~8,500 Middlemore bereavement records, ~5,500 cardiac/inherited-disease registry records, and records of six health regulatory boards (access blocked; no evidence at the time that they were downloaded)

NZ Privacy Commissioner (compliance investigation commenced Dec 2022)

Confirmed

Usernames, names, email addresses and city/country; bcrypt-hashed passwords for a subset of users (~61M reported)

None reported

Reported

Job-applicant personal details and reference contact information, and PageUp employee usernames/passwords (hashed and salted); PageUp said tax file numbers and financial/bank details were not affected

OAIC and ACSC / CERT Australia (notified)

Reported