Personal information exposed by Australian Human Rights Commission data breach
Briefly

The Australian Human Rights Commission (AHRC) disclosed a major data breach, revealing that over 600 submissions were unintentionally made public between April and May 2025. The breach was initially identified on April 10 when the AHRC found that attachments from complaints submitted via their web form were accessible online from April 3 to 10. Further scrutiny on May 8 unveiled additional exposé concerning documents linked to the AHRC's projects and nominations, highlighting vulnerabilities in the data handling processes. This incident emphasizes the critical need for enhanced data security in human rights institutions.
The Australian Human Rights Commission (AHRC) reported a significant data breach, with over 600 submissions and nominations accidentally exposed online for more than a month.
The breach, recognized on April 10, involved attachments related to various complaint web forms, compromising sensitive information accessed from April 3 to 10.
Further investigations revealed more document exposures linked to feedback for AHRC projects, occurring between April 3 and May 5, highlighting ongoing vulnerabilities.
The incident underscores the necessity for stringent data protection measures, especially within institutions tasked with handling sensitive human rights information.
Read at Databreaches
[
|
]