The recent data breach at the Australian Human Rights Commission (AHRC) is a stark reminder of what’s at stake when public sector cybersecurity falls short.