On 5 April 2018, the Office of the Australian Information Commissioner (OAIC) initiated an investigation under section 40(2) of the Privacy Act 1988 (Cth) in response to reports indicating that the personal information of Australian users may have b…