"It is a classic example of how you can have all the standards and technology in the world, but it is of little use if policies are not followed by users," Ellsmore said.

Asked about procedures and the use of encryption, an AHTCC spokesperson said the agency was unable to comment immediately.

More details are expected to be made available by the AFP later Monday.

Only last week a flurry of new data breaches was disclosed, including ING Financial Services, Union Pacific Corporation and the American International Group.

The latest disclosures bring to more than 190 the number of such incidents reported since the ChoicePoint breach in February 2005, according to a list maintained by the Privacy Rights Clearinghouse.