Australia's best-known crisis-support charity confirmed a breach after a serial hacker known as "2019" dumped 10,000+ staff and volunteer records on an underground forum — for free. We cover the timeline (forum post 11 July, confirmation 14 July), what was taken (names, work emails, DOBs, phone numbers, departments — with help-seeker and donor data confirmed NOT affected), and the two twists: parts of the leaked data appear deliberately doctored, and the same actor is linked to 25+ Australian victims in five months (counts unverified). Lessons: verify leak claims in both directions, segment crisis/service data from corporate systems (Lifeline's clean "no help-seeker data" answer was an architecture win), warn staff about follow-on scams early, and treat charity-sector cyber capability as a governance issue. If this raises anything for you: Lifeli ...