A major public health sector data breach occurred when confidential, non-anonymized patient medical entries, internal operational schedules, and identity data fields were extracted and published on an external website.