Service NSW not effectively handling private information: NSW Auditor-General

Report arrives following breaches earlier this year from emails spoofing Office 365 warnings.