Australia's TLD domain registrar, auDA, confirms data breach: https://www.auda.org.au/statement/resolution-cyber-incident

(after initially denying it): https://www.auda.org.au/statement/auda-statement