The Australian Human Rights Commission (AHRC) has confirmed a serious privacy breach that left sensitive documents publicly accessible online for over a month.

Between March 24 and April 10, 2025, about 670 documents submitted through the AHRC’s online forms were exposed to the public internet. At least 100 of them were viewed—including by search engines like Google and Bing.

What Was Exposed?

The leaked files included deeply personal information:

• Full names and contact details
  
• Street addresses and mobile numbers
  
• Workplace information, including employers and job roles
  
• Health details, education history, religious affiliation, and photographs

These documents came from submissions to various AHRC initiatives, including:

• The Speaking from Experience Project
  
• Human Rights Awards 2023 nominations
  
• A National Anti-Racism Framework concept paper

This wasn’t a cyberattack. It was a publishing error—one that made confidential attachments submitted through online forms publicly searchable.

The Commission found the breach on April 10 and took immediate steps to shut down the exposed files, investigate the issue, and limit the damage. The attachment upload feature on the complaints form was also disabled.

What AHRC Is Doing Now?

The Commission reported the breach to the Office of the Australian Information Commissioner (OAIC) and launched an internal response task force.

Here’s what’s been done so far:

• All online forms on the AHRC site have been taken down as a precaution
  
• Affected documents have been removed from public access and search engine results
  
• Individuals impacted by the breach are being notified directly, where possible
  
• Guidance on how to protect personal data has been published on the AHRC website

In the meantime, people can still file complaints or nominations by downloading a PDF or Word version of the forms and submitting them by email or post.

A Broader Problem: Human Error in Government Data Handling

This breach is part of a troubling pattern. Government agencies in Australia are increasingly vulnerable to data handling errors.

According to the OAIC’s Notifiable Data Breaches report, government entities reported 100 out of 595 total data breaches between July and December 2024. Nearly a third of these incidents were caused by human error—often through mishandled emails or documents accidentally published online.

And the delay between the breach and its discovery isn’t uncommon. In this case, data started leaking on March 24, but the AHRC didn’t detect it until April 10. Public disclosure didn’t happen until more than a month after the breach began.

Information Commissioner Carly Kind stressed that government agencies need to detect and disclose incidents faster. “Timely action is critical,” she said, pointing out that many public sector bodies fall short of expectations in breach management.

How to Prevent It From Happening Again?

Security experts say the solution isn’t complicated—but it does require commitment. Agencies and organizations can reduce the risk of similar breaches with a few key practices:

• Tighten access controls: Limit who can see and upload sensitive data
  
• Audit systems regularly: Test for weak points and fix issues before they’re exploited
  
• Train staff: Make sure employees know how to handle personal data correctly
  
• Have a breach plan: Create a step-by-step response plan for when things go wrong
  
• Limit data collection: Only ask for the information that’s truly needed—and don’t keep it longer than necessary

These are basic steps. But when followed consistently, they can go a long way in protecting people’s private information—especially in sectors tasked with upholding human rights.

As the AHRC works through its response, the incident serves as a wake-up call for all agencies handling sensitive public data. The cost of inaction, even when unintentional, can be serious—both for the individuals affected and for public trust in government.

Nucor Corporation—the largest steelmaker in North America—revealed on May 14 that it was hit by a cyberattack that disrupted its IT systems and forced production halts at several sites in the U.S., Mexico, and Canada.

The company took immediate action, shutting down affected systems and activating its incident response plan. While production was paused as a precaution, Nucor is now working to bring its operations back online.

What Happened?

Nucor discovered unauthorized access to its network earlier this week and moved quickly to contain the breach. The company says it’s working with third-party cybersecurity firms and has contacted federal law enforcement to assist with the investigation.

So far, Nucor hasn’t said what kind of attack occurred—whether it involved data theft, ransomware, or another method—and hasn’t confirmed if any sensitive information was compromised.

Still, the incident fits a troubling pattern. It echoes the kind of disruption seen in past high-profile attacks, such as the 2021 ransomware strike on Colonial Pipeline that crippled fuel supplies along the U.S. East Coast.

Which Sites Were Hit?

Nucor hasn’t disclosed which facilities were affected or how many locations paused operations. It confirmed that multiple sites were impacted and that systems were taken offline as a safety measure.

As of the latest update, the company is working to restore full production. There’s no word yet on whether customers will experience delays or if the attack caused broader supply chain issues.

Why It Matters: Manufacturing Is Under Siege

Nucor’s breach is part of a broader trend. The manufacturing sector has been the top target for cyberattacks for four years running, according to IBM’s 2025 X-Force threat report.

Why is manufacturing so vulnerable?

• Many plants run on outdated technology that’s difficult to patch
  
• Downtime is costly, so companies are slower to halt production for upgrades
  
• There’s often a lack of hands-on cybersecurity training for industrial teams

“These environments weren’t built with cybersecurity in mind,” said Debbie Gordon, CEO of cyber defense firm Cloud Range. “You need real-world simulation training to prepare teams to detect and stop threats quickly.”

Gunter Ollmann, CTO at Cobalt, adds that response times in industrial settings lag behind other sectors because of old infrastructure and the steep cost of stopping production. “That delay creates an opening for attackers,” he said.

What’s Next for Nucor—and the Industry?

Nucor has committed to sharing more information as its investigation unfolds. The company is still assessing the scope of the breach and its full impact.

In the meantime, the incident is another wake-up call for manufacturers. Experts say it’s critical for companies to reassess their cybersecurity posture now—not after an attack.

From bolstering network defenses to training staff and securing legacy systems, the cost of prevention is becoming far cheaper than the price of recovery.

The steel giant’s experience will likely serve as a case study in what happens when cyber threats hit industrial giants—and how quickly they can bounce back.

A bipartisan group of U.S. lawmakers is urging the Department of Commerce to investigate and potentially ban the sale of TP-Link networking equipment in the United States, citing national security concerns over the Chinese company’s alleged ties to the Chinese Communist Party (CCP) and its dominant presence in the U.S. router market.

In a letter addressed to Commerce Secretary Howard Lutnick, the legislators expressed alarm over TP-Link’s significant market share—reportedly around 65% of the U.S. home and small business router market—and the potential risks this poses to national security. They highlighted concerns that TP-Link’s devices could be exploited by Chinese state-sponsored hackers to infiltrate American networks, especially given past incidents where vulnerabilities in TP-Link routers were allegedly used in cyberattacks targeting government officials in Europe.

“TP-Link’s deep ties to the Chinese Communist Party, use of predatory pricing to eliminate trusted U.S. alternatives, and role in embedding foreign surveillance and destructive capabilities into our networks render it a clear and present danger,” the lawmakers wrote.

The letter also pointed to TP-Link’s alleged non-compliance with industry efforts to mitigate Chinese state-sponsored botnets and its refusal to participate in initiatives aimed at enhancing cybersecurity.

In response, TP-Link has denied the allegations, stating that the claims are “categorically false” and part of a smear campaign intended to remove a competitor from the marketplace. The company emphasized that it operates independently of its Chinese parent company, TP-Link Technologies Co., following a corporate restructuring completed in October 2024. TP-Link also noted that its products have been manufactured in Vietnam since 2018, aiming to distance itself from Chinese influence.

Despite these assertions, the Department of Justice has reportedly initiated a criminal antitrust investigation into TP-Link’s pricing strategies, examining whether the company engaged in predatory pricing practices that could harm competitors not considered national security threats. The investigation also explores potential national security risks associated with TP-Link’s growing market share.

The Commerce Department, empowered by Executive Order 13873, has broad authority to ban or restrict transactions between U.S. firms and foreign adversary nations if their products pose a national security risk. This executive order has previously been used to prohibit the use of telecommunications and surveillance technology from Chinese firms Huawei and ZTE.

As the investigation unfolds, consumers and businesses using TP-Link products are advised to stay informed about potential developments and consider the security implications of their networking equipment choices.

Alabama state officials are responding to a cybersecurity incident that has affected certain state government systems. Governor Kay Ivey announced on May 13 that the state is addressing a “cybersecurity event” and advised residents to anticipate potential disruptions to government website access and other services.

The incident, first detected on May 9, involved the compromise of some state employee usernames and passwords. However, officials currently believe that no personally identifiable information of Alabama residents has been accessed.

The Alabama Office of Information Technology (OIT) has been working continuously to identify and mitigate the impact of the incident. Two third-party cybersecurity firms have been engaged to assist with the response, maintaining round-the-clock operations to contain the situation.

As a precautionary measure, all state agencies have been instructed to reset employee passwords. While the full scope of the incident remains under investigation, there have been no major disruptions to state services reported thus far.

Governor Ivey emphasized the importance of vigilance, reminding state employees to be cautious of potentially malicious emails. The state has not yet identified the responsible parties behind the cybersecurity event.

The OIT has established a dedicated webpage to provide updates on the incident. Officials have stated that, due to the ongoing nature of the investigation, information will be shared as it becomes available and as security protocols permit.

This incident highlights the growing threat of cyberattacks on government systems, underscoring the need for robust cybersecurity measures and preparedness.