The National Disability Insurance Agency (NDIA) detected a significant privacy breach involving the systematic, unauthorized downloading and illicit third-party sharing of National Disability Insurance Scheme (NDIS) participant profile records by an inside actor.