The Department of Home Affairs staff handling a whistleblower’s complaint mixed up an email address with that of another, unrelated complainant. The mistake revealed the identity of the whistleblower and sensitive details of their disclosure, and could constitute a criminal offence punishable by six months’ imprisonment.
