{"meta":{"exportedAt":"2026-10-29T06:47:46.133Z","formatVersion":2,"selection":{"q":"passport","system":"","harm":"","context":"","country":"","role":"","relation":"","evidence":"","year":"2025","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":2,"coverage":{"cases":2,"countries":1,"languages":2,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":1,"minors":0,"coreRelations":1,"contextualRelations":1,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2025-amsterdam-court-jails-man-who-used-deepfakes-of-other-peoples-id-photos-to-open-47-bank-accounts-in-their-names","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"'Hij zou 47 bankrekeningen geopend hebben' ... 'met behulp van deepfake-technologie' ... 'Dit gebeurde in de periode van 20 maart 2025 tot en met 14 november 2025' ... 'Hij zou deepfake-technologie gebruiken om het identiteitsverificatiesysteem te misleiden'","relation":"supports","source_id":"s1"}],"assertion":"The Amsterdam District Court said a 34-year-old man was suspected of opening 47 bank accounts in other people's names with deepfake technology between 20 March and 14 November 2025, using it to mislead the identity-verification system.","causal_attribution":"The court's own statement of the charge; documents what was charged, not guilt."},{"id":"c2","status":"reported","evidence":[{"locator":"'Volgens het OM omzeilde de man dat door de foto op ID-bewijzen te vervangen door een pasfoto van hemzelf' ... 'Ook paste hij volgens justitie zijn eigen gezichtsfoto' ... 'aan, zodat die leken op de pasfoto' ... 'In de gezichtsscan van de man zijn kenmerken uit de pasfoto van de vrouw te zien'","relation":"supports","source_id":"s2"}],"assertion":"At the hearing the prosecution said the man got past ABN AMRO's app check by replacing ID-document photos with a photo of himself and by adjusting his own face photos to resemble them, and the judge noted that a selfie submitted with a woman's identity document showed features of her passport photo.","causal_attribution":"Prosecution's account and the judge's remark, reported from the hearing."},{"id":"c3","status":"reported","evidence":[{"locator":"'ID-bewijzen van slachtoffers op wier naam rekeningen waren geopend'","relation":"supports","source_id":"s2"}],"assertion":"The prosecution said identity documents of victims in whose names accounts were opened were found on his phone.","causal_attribution":"Prosecution's statement in court."},{"id":"c4","status":"documented","evidence":[{"locator":"'waarin hij verklaarde dat hij vanaf 28 september 2025 wetenschap had van de strafbare feiten' ... 'De rechtbank heropent daarom het onderzoek ter terechtzitting'","relation":"supports","source_id":"s1"}],"assertion":"In a written statement the man said he only knew of the offences from 28 September 2025, and on 31 March 2026 the court reopened the investigation to examine the data on his phone.","causal_attribution":"Interim ruling and the content of his written statement, documented by the court's release."},{"id":"c5","status":"reported","evidence":[{"locator":"'krijgt 2,5 jaar cel' ... 'De rechtbank ging mee met de eis van het OM' ... '13.000 euro schadevergoeding betalen aan ABN Amro' ... 'Van de 2,5 jaar cel zijn zes maanden een voorwaardelijke straf'","relation":"supports","source_id":"s3"}],"assertion":"According to AT5, on 17 June 2026 the court followed the prosecution's demand and sentenced him to two and a half years in prison, six months of it suspended, and ordered him to pay 13,000 euros to ABN AMRO.","causal_attribution":"Verdict as reported by AT5; judgment text not inspected."},{"id":"c6","status":"reported","evidence":[{"locator":"'Hij wist 47 rekeningen te openen door gezichtskenmerken van zijn slachtoffers met AI op zijn eigen gezicht te plakken' ... 'Een deel van deze bankrekeningen is gebruikt voor bankhelpdeskfraude en het opnemen van contant geld'","relation":"supports","source_id":"s3"}],"assertion":"AT5 reports that he opened the 47 accounts by pasting his victims' facial features onto his own face with AI, and that part of the accounts was used for bank-helpdesk fraud and cash withdrawals.","causal_attribution":"AT5's account of the convicted conduct; consistent with the court's and prosecution's deepfake description."},{"id":"c7","status":"reported","evidence":[{"locator":"'De verdachte zegt dat hij in die periode niets met de fraude te maken had'","relation":"supports","source_id":"s2"},{"locator":"'De verdachte heeft zelf altijd ontkend'","relation":"supports","source_id":"s3"}],"assertion":"The man denied involvement in the fraud during the earlier period at the hearing, and AT5 reports that he always denied the charges.","causal_attribution":"Counterevidence: the defendant's denial."}],"effects":[{"label":"identities of other people used to open 47 bank accounts by deepfaked face scans","claim_id":"c6","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.rechtspraak.nl/organisatie-en-contact/organisatie/rechtbanken/rechtbank-amsterdam/nieuws/2026/03/extra-onderzoek-nodig-in-zaak-oplichting-bank-met-deepfake-technologie","kind":"court_press_release","access":"read","language":"nl","translation_note":"Read in Dutch by the research agent (an AI) on 2026-10-26; English renderings are the agent's own translation. Press release of the Amsterdam District Court on its interim judgment, 31 Mar 2026; HTTP 200.","independence_group":"rechtbank-amsterdam-31-mar-2026"},{"id":"s2","url":"https://nos.nl/artikel/2606734-man-met-wiens-gezicht-tientallen-bankrekeningen-werden-geopend-voor-de-rechter","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch by the research agent (an AI) on 2026-10-26; English renderings are the agent's own translation. NOS report of the 17 Mar 2026 hearing (prosecution and judge's statements in court); HTTP 200.","independence_group":"nos-hearing-17-mar-2026"},{"id":"s3","url":"https://www.at5.nl/artikelen/238721/amsterdammer-deepfakes-47-bankrekeningen-openen","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch by the research agent (an AI) on 2026-10-26; English renderings are the agent's own translation. AT5 report of the 17 Jun 2026 verdict; HTTP 200.","independence_group":"at5-verdict-17-jun-2026"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","privacy","justice"],"unknowns":["Which deepfake tool was used.","How many distinct people's identities were used for the 47 accounts.","The losses of the people defrauded through the accounts and whether the verdict was appealed."],"geography":{"basis":"The Amsterdam District Court in the Netherlands heard the case, so NL is the court country. The sources do not state where the accounts were opened from or where the people whose identities were used live, so no event or affected-person country is recorded from the court's seat or the bank's nationality.","court_countries":["NL"],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): a Dutch court and prosecutors say a man used deepfake technology to make his face scans match other people's ID photos and open 47 bank accounts in their names, and the court convicted him in June 2026 according to AT5. Private names are not used.","reviewed_on":"2026-10-26"},"ai_involvement":{"basis":"The Amsterdam District Court's press release states that the man was suspected of using deepfake technology to mislead the bank's identity-verification system and open 47 accounts in other people's names. At the hearing the prosecution described how he adjusted his own face photos to resemble the ID photos, and the judge noted that a selfie submitted with a woman's document showed features of her passport photo. AT5 reports that he was convicted and sentenced for opening the accounts by pasting his victims' facial features onto his own face with AI. The specific tool is not named and the written judgment was not inspected.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Amsterdam court jails man who used deepfake technology to pass a bank's face check with other people's IDs and open 47 accounts in their names","summary":"The Amsterdam District Court said in March 2026 that a 34-year-old man was suspected of opening 47 bank accounts in other people's names between 20 March and 14 November 2025 by using deepfake technology to mislead a bank's identity-verification system. At the hearing on 17 March 2026, the prosecution said he had beaten ABN AMRO's app check, which compares a face scan with the photo on an identity document, by replacing ID photos with his own and by adjusting his own face photos to resemble the ID photos; the judge noted that a selfie submitted with one woman's identity document showed features of her passport photo. The prosecution said identity documents of the victims in whose names accounts were opened were found on his phone. The man denied knowing of the fraud before late September 2025, and the court reopened the investigation on 31 March to examine his phone data. According to AT5, on 17 June 2026 the court sentenced him to two and a half years in prison, six months of it suspended, and ordered him to pay 13,000 euros to ABN AMRO; AT5 reports that he pasted his victims' facial features onto his own face with AI and that some of the accounts were used for bank-helpdesk fraud and cash withdrawals.","incidentDate":"2025-03-20","incidentEndDate":"2025-11-14","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2026-03-17","aiSystem":"Deepfake technology used to alter face scans so that they matched other people's identity-document photos in ABN AMRO's account-opening app, according to the Amsterdam District Court and the prosecution (tool not identified)","aiProduct":"Unidentified image tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse","other_material_harm"],"harmOutcomeSummary":"According to the Amsterdam District Court, the prosecution and AT5's report of the verdict, a man used deepfake technology to make his face scans match other people's identity-document photos, opening 47 ABN AMRO accounts in their names; some accounts were then used for bank-helpdesk fraud and cash withdrawals.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The court says 47 accounts were opened in the names of others, and the hearing report describes two of the identity holders (a man and a woman); the number of distinct people is not stated, so two is the documented minimum. Victims of the bank-helpdesk fraud run through the accounts and the bank itself are not counted.","victimAgeRange":"unknown","jurisdiction":"NL","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"resolved","primarySourceUrl":"https://www.rechtspraak.nl/organisatie-en-contact/organisatie/rechtbanken/rechtbank-amsterdam/nieuws/2026/03/extra-onderzoek-nodig-in-zaak-oplichting-bank-met-deepfake-technologie","primarySourceLabel":"Rechtbank Amsterdam, 31 Mar 2026: further investigation needed in bank fraud case using deepfake technology","firstPublishedAt":"2026-10-26T03:20:11.628878+00:00","updatedAt":"2026-10-26T03:20:11.628878+00:00","scopeVersion":"facts-v3","tags":["deepfake","identity-verification","bank-account-fraud","identity-theft","criminal-conviction","netherlands","depicted-or-impersonated"]},{"id":"2025-nsw-resilient-homes-program-applicant-data-uploaded-to-chatgpt","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Some personal information provided by people during the RHP applications process was uploaded by a former temporary employee of the RA to the AI platform, ChatGPT.","relation":"supports","source_id":"s1"},{"locator":"The data shared was contained in a Microsoft Excel spreadsheet with 10 columns and more than 12,000 rows of information.","relation":"supports","source_id":"s1"},{"locator":"The upload took place between 12 and 15 March 2025.","relation":"supports","source_id":"s1"},{"locator":"This incident occurred when a former temporary employee uploaded information from a Microsoft Excel spreadsheet to an unauthorised third-party AI platform, ChatGPT.","relation":"supports","source_id":"s1"},{"locator":"Between 12 and 15 March 2025, personal information was uploaded by a former contractor of the RA to the Artificial Intelligence platform ChatGPT.","relation":"supports","source_id":"s4"},{"locator":"\"Personal information was uploaded by a former contractor of the RA to the artificial intelligence platform ChatGPT,\" an RA spokesperson said.","relation":"supports","source_id":"s2"},{"locator":"The authority said in a breach notice that the upload “was not authorised”.","relation":"supports","source_id":"s3"}],"assertion":"Between 12 and 15 March 2025 a former temporary staff member (called a former contractor in the first notice) of the NSW Reconstruction Authority uploaded a Microsoft Excel spreadsheet of Northern Rivers Resilient Homes Program information (10 columns, more than 12,000 rows) to ChatGPT; the Authority says the upload was not authorised and was not a cyber-attack.","causal_attribution":"The Authority's own notices report the upload, its dates and its unauthorised status; the ABC and iTnews relay those notices. The uploader's role is a former temporary staff member on the current page and a former contractor in the first notice and the press."},{"id":"c2","status":"reported","evidence":[{"locator":"2031 people who provided information to the RA for the RHP had some of their data uploaded to ChatGPT.","relation":"supports","source_id":"s1"},{"locator":"Name and contact details","relation":"supports","source_id":"s1"},{"locator":"Residential/mailing address","relation":"supports","source_id":"s1"},{"locator":"Date of birth","relation":"supports","source_id":"s1"},{"locator":"Sensitive personal information","relation":"supports","source_id":"s1"},{"locator":"Sensitive health information","relation":"supports","source_id":"s1"},{"locator":"Limited financial commentary, but not banking or financial details","relation":"supports","source_id":"s1"},{"locator":"no driver's licence numbers, Medicare numbers, passport numbers, or Tax File Numbers were disclosed in the breach.","relation":"supports","source_id":"s1"},{"locator":"Up to 3000 individuals may be impacted by the breach.","relation":"supports","source_id":"s4"},{"locator":"The breach shared the names and addresses of program applicants, as well as email addresses, phone numbers, and other personal and health information.","relation":"supports","source_id":"s2"}],"assertion":"The Authority says external forensic analysis confirmed that 2031 people who provided information for the program had some of their data uploaded to ChatGPT, including name and contact details, residential or mailing address, date of birth, sensitive personal and health information and limited financial commentary, and that no driver licence, Medicare, passport or Tax File Numbers were disclosed; its first notice had estimated up to 3000 people.","causal_attribution":"The Authority's statements report the count and data categories from its forensic analysis; the ABC relays the first notice's categories."},{"id":"c3","status":"reported","evidence":[{"locator":"There is no evidence that any of the uploaded data is publicly available online or has been accessed by a third party at this stage.","relation":"supports","source_id":"s1"},{"locator":"We believe the risk of misuse is low","relation":"supports","source_id":"s1"},{"locator":"There is no evidence that any information has been made public, however this cannot be ruled out","relation":"supports","source_id":"s4"}],"assertion":"The Authority says there is no evidence that the uploaded data is publicly available online or has been accessed by a third party; its first notice said this could not be ruled out, and it assesses the risk of misuse as low.","causal_attribution":"The Authority's own assessment. Whether OpenAI retained, deleted or used the uploaded data is not addressed in the inspected sources."},{"id":"c4","status":"reported","evidence":[{"locator":"we are deeply sorry for the distress it may cause for those involved in the program.","relation":"supports","source_id":"s1"},{"locator":"I feel concerned — the information with the RA was deeply personal,","relation":"supports","source_id":"s2"}],"assertion":"The Authority apologised for the distress the breach may cause, and a program participant whose flooded home was bought back told the ABC the information held by the Authority was deeply personal and that they felt concerned.","causal_attribution":"The concern is one participant's stated reaction; the ABC does not say whether this person is among the 2031. No identity misuse or other realised loss is reported."},{"id":"c5","status":"reported","evidence":[{"locator":"We are working with Social Futures to reach out to people who have been impacted and ID Support NSW, a government identity and cyber security support service, to assist anyone whose data may have been compromised.","relation":"supports","source_id":"s1"},{"locator":"The NSW Reconstruction Authority will provide compensation for any reasonable out of pocket expenses if any compromised identity documents need to be replaced.","relation":"supports","source_id":"s4"}],"assertion":"The Authority contacted affected people with ID Support NSW and Social Futures to offer support, and said it would compensate reasonable out-of-pocket expenses if compromised identity documents needed replacing.","causal_attribution":"The Authority's statements about its response."},{"id":"c6","status":"reported","evidence":[{"locator":"We are working with Cyber Security NSW to monitor the internet and dark web to see if any of this information is accessible online. The NSW Privacy Commissioner has also been notified.","relation":"supports","source_id":"s1"},{"locator":"The RA has also implemented controls to block the upload of personal information into AI tools.","relation":"supports","source_id":"s1"},{"locator":"An independent review into the data breach has now been completed, identifying several areas for improvement in RA’s governance, training and data security practices.","relation":"supports","source_id":"s1"}],"assertion":"The Authority notified the NSW Privacy Commissioner, had Cyber Security NSW monitor the internet and dark web, implemented controls to block the upload of personal information into AI tools, and completed an independent review that identified areas for improvement in its governance, training and data security practices.","causal_attribution":"The Authority's own account of its response; the review report itself was not inspected."},{"id":"c7","status":"reported","evidence":[{"locator":"The AI-related data breach was disclosed on what is a public holiday Monday in NSW, although it actually occurred over six months ago, between March 12 and 15.","relation":"supports","source_id":"s3"},{"locator":"said she received a preliminary report about the breach in July, and the final report on Friday.","relation":"supports","source_id":"s2"},{"locator":"\"I would prefer [for the RA] to advise people sooner, and I'm also informed they couldn't identify everybody, but I need to see the report first,\" she said.","relation":"supports","source_id":"s2"}],"assertion":"The breach was disclosed publicly on 6 October 2025, more than six months after the upload; the NSW Minister for Recovery told the ABC she had received a preliminary report about the breach in July and would have preferred people to be advised sooner.","causal_attribution":"iTnews's own observation of the disclosure timing and the Minister's statement to the ABC; the Authority attributes the delay to the time needed to identify affected people."}],"effects":[{"label":"personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation","claim_id":"c2","direction":"negative"},{"label":"a program participant reports concern about the deeply personal information held; the Authority apologised for possible distress","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"English original; full body read by curl on 2026-10-11 (page last updated 26 March 2026, with the 9 December 2025 update and FAQ on the same page).","independence_group":"nsw-ra-statement"},{"id":"s2","url":"https://www.abc.net.au/news/2025-10-06/data-breach-northern-rivers-resilient-homes-program-chatgpt/105855284","kind":"news_report","access":"read","language":"en","translation_note":"English original; full body read by curl on 2026-10-11. Relays the Authority statement; the participant and the Minister were interviewed separately within the same article.","independence_group":"nsw-ra-statement"},{"id":"s3","url":"https://www.itnews.com.au/news/nsw-gov-contractor-uploaded-excel-spreadsheet-of-flood-victims-data-to-chatgpt-620815","kind":"news_report","access":"read","language":"en","translation_note":"English original; full body read by curl on 2026-10-11. Relays the Authority breach notice; the disclosure-timing observation is the outlet's own.","independence_group":"nsw-ra-statement"},{"id":"s4","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/media-releases/northern-rivers-resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"English original; full body read by curl on 2026-10-11. Authority departmental release of the first notice, 6 October 2025.","independence_group":"nsw-ra-statement"}],"version":1,"ai_roles":["institutional_use"],"contexts":["privacy","public_services"],"unknowns":["Why the staff member uploaded the spreadsheet and what, if anything, was asked of ChatGPT; no ChatGPT output is described.","Whether OpenAI retained, deleted or used the uploaded data for training; the sources establish the upload to the service only.","Whether any participant suffered identity misuse or other realised loss; none is reported.","Whether the uploader was a temporary staff member or a contractor (the Authority uses both terms), and how many separate uploads occurred between 12 and 15 March 2025.","The findings of the independent review beyond the Authority's summary of it."],"geography":{"basis":"The data was held by the NSW Reconstruction Authority, a New South Wales government agency, and was uploaded by a former temporary staff member of that agency; the Authority describes the incident as a breach of its program data. The ABC describes the affected people as northern NSW residents of the Northern Rivers region. No court is involved.","court_countries":[],"event_countries":["AU"],"affected_person_countries":["AU"]},"publication":{"basis":"The Authority's notices, read in full on 2026-10-11, state that a staff member uploaded program participants' personal and sensitive information to ChatGPT without authorisation and that forensic analysis confirmed 2031 affected people. The disclosure of their information to a generative AI service without their knowledge is the recorded privacy harm. The upload rests on the Authority's own account, which the press relayed; no retention, training, public exposure or misuse is established. The uploader and affected people are not named.","reviewed_on":"2026-10-11"},"ai_involvement":{"basis":"The Authority states that a former temporary staff member uploaded a spreadsheet of program information to ChatGPT between 12 and 15 March 2025, that the upload was not authorised, and that forensic analysis confirmed 2031 people had some of their data uploaded. The reported transfer of their personal and sensitive information into the generative AI service is the AI connection to the privacy harm. This establishes the upload only. It does not establish retention by OpenAI, use for training, public exposure or a finding of illegality, and no ChatGPT output affecting participants is described.","status":"supported"},"person_relations":["received_personal_information"]},"name":"NSW Reconstruction Authority says a former temporary staff member uploaded 2031 Resilient Homes participants' personal data to ChatGPT without authorisation","summary":"The NSW Reconstruction Authority says that between 12 and 15 March 2025 a former temporary staff member (called a former contractor in its first notice) uploaded a Microsoft Excel spreadsheet of Northern Rivers Resilient Homes Program information, 10 columns and more than 12,000 rows, to ChatGPT, an AI platform the Authority had not authorised. The Authority disclosed the breach on 6 October 2025, estimating that up to 3000 people were affected, and later said external forensic analysis confirmed that 2031 people had some of their data uploaded, including names, contact details, addresses, dates of birth, sensitive personal and health information and limited financial commentary. It says no driver licence, Medicare, passport or Tax File Numbers were disclosed and that there is no evidence the data is publicly available or was accessed by a third party; whether OpenAI retained or used the data is not addressed. The Authority apologised, contacted affected people with ID Support NSW, offered to compensate the replacement of compromised identity documents and notified the NSW Privacy Commissioner. A program participant told the ABC the information was deeply personal and that they felt concerned. No misuse of the data is reported.","incidentDate":"2025-03-12","incidentEndDate":"2025-03-15","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2025-10-06","aiSystem":"ChatGPT (OpenAI), used through an unauthorised upload of program data by a person working for the NSW Reconstruction Authority","aiProduct":"ChatGPT","aiCompany":"OpenAI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The NSW Reconstruction Authority reports that personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation, a loss of privacy for those people; it reports no evidence of public exposure or third-party access, and no misuse is reported (the Authority's notices and press coverage relaying them).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2031,"affectedCountStatus":"exact","affectedCountEvidence":"The Authority states that external forensic analysis confirmed 2031 people had some of their data uploaded to ChatGPT. The upload of their personal information to the AI service is itself the privacy harm recorded, so those 2031 people are counted as other people harmed. The first notice's estimate of up to 3000 is not used; the 12,000 rows are rows, not people. The participant quoted by the ABC is not separately counted because the ABC does not say whether that person is among the 2031. The uploader is not counted.","victimAgeRange":"unknown","jurisdiction":"AU-NSW","platformType":"chatbot","outcomeType":"investigation_opened","outcomeStatus":"resolved","primarySourceUrl":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","primarySourceLabel":"NSW Reconstruction Authority, updated 26 March 2026: Resilient Homes Program data breach","firstPublishedAt":"2026-09-29T12:41:19.196147+00:00","updatedAt":"2026-10-11T03:10:38.11789+00:00","scopeVersion":"facts-v3","tags":["historical-2025"]}]}