There was a reduction in high-risk personal data breaches in the second quarter of this year, new statistics show.

The Office of the Data Protection Authority’s latest report showed eight self-reported cases to it – a drop from 14 in the first three months of 2025.

The number of cases remained steady though, with around 50 breaches reported.

Information being sent to the incorrect email address continued to be the most common type of breach.

One case involved a family member requesting medical details on behalf of a family member.

The information was provided verbally, but the ODPA said it wasn’t clear if the person was authorised to receive the information on behalf of the patient in question. 

The ODPA said paper authorisation should be prioritised when sharing personal details to a third party.