Political parties hold vast amounts of data about Australians. Experts say it’s a growing risk

The announcement this month of the ransomware attack on the Trumpet of Patriots and the United Australia party was the first time Australians became aware of a major data breach of any political party. Photograph: Posed by model; Yuliya Taba/Getty Images

More than two years before the data breach of Clive Palmer’s Trumpet of Patriots and United Australia parties, the federal government was warned that there was a significant risk to political parties – which are exempt from many data protection obligations – holding sensitive information on voters.

The ransomware attack on Trumpet of Patriots announced earlier this month was the first time Australians became aware of a major data breach of any political party. It only became public information because the party decided to report it. The attack also affected the United Australia party.