The Australian Human Rights Commission (AHRC) disclosed a data breach incident where private documents leaked online and were indexed by major search engines. Many of the hundreds of documents exposed online contained private, sensitive information, like names, contact information, health details, schooling, religion, employment info, and photographs. A total of 670 documents have been exposed online and accessed between April 3 and May 5, 2025. The incident was not a result of a malicious external attack but due to underlying misconfigurations. The organization has requested the immediate removal of the indexed files from search engines and disabled all web forms to prevent subsequent exposure.
TPRM report: https://scoringcyber.rankiteo.com/company/australian-human-rights-commission
"id": "aus409051525",
"linkid": "australian-human-rights-commission",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"