The NSW Police leaked the emails of over 150 complainants.
The Complainants contacted them in order to raise concerns regarding officers’ use of force following the Sydney Black Lives Matter protest.
According to section 169A of the Police Act 1990 (NSW) a member of the NSW Police Force must not disclose to any person the identity of a complainant unless the disclosure is made in accordance with guidelines established by the Commissioner, with the consent of the complainant, in a situation where it is required by law, or for the purposes of any legal proceedings before a court or tribunal.
It was a complete betrayal of public trust and accountability.
Source: https://www.lexology.com/library/detail.aspx?g=a8e935a9-c7f4-4c84-983e-9d33caab6eae
TPRM report: https://scoringcyber.rankiteo.com/company/nsw-police-force
"id": "nsw212518123",
"linkid": "nsw-police-force",
"type": "Data Leak",
"date": "08/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"