With close support from the Australian Cyber Security Centre and Microsoft, the ASC has undertaken a thorough review into the incident. At this stage of the investigation we have determined that it is not possible to conclusively determine if any personal information contained in the email account was extracted by an unauthorised person.