The The Australian Computer Emergency Response Team (AusCERT) has admitted that it has lost a DVD that contained subscribers data of the Federal Government's Stay Smart Online alert service.
The disc was sent via post in April, but it was never received as intended by the Department of Broadband, Communications and the Digital Economy.
It is said to have contained usernames, email addresses, passwords and recovery phrases, however subscribers have been assured that the passwords were 'unreadable' due to a cryptographic hash. However, neither AusCERT or the department were able to say what encryption hash was used to secure the records.
The government has urged users to change their passwords but said it had 'no reason to believe that this information has been found and misused by any third party' and said it did 'not believe that there is a privacy risk'.
The DVD was sent prior to the expiry of AusCERT's contract to run the service on behalf of the department. The Government is re-developing the alert service under two new contractors.