Director of the Centre for Internet Safety at the University of Canberra Nigel Phair said people needed to determine if the password they used for the PageUp system was used elsewhere and if so, change the password at other logins.

“They should also monitor their letterbox for any strange notifications, especially from finance companies and finally keep an eye on any unusual transactions on their bank account,” Mr Phair said.

“Hackers seek to monetise their efforts, to do so, they may sell the personal records to another party, or they may use them for identity theft.”

The Department of Premier and Cabinet is working on an alternative for advertising positions and accepting applications after suspending use of PageUp.

“We will have an alternative solution up and running as soon as possible to ensure that key vacancies can be filled, including those that were open at the time of the data incident,” DPAC secretary Jenny Gale said.

“People should not share their information or credentials if they receive unsolicited contact from any party, including anyone claiming to represent PageUp.”

CPSU secretary Tom Lynch said the union had been inundated with calls from members and non-members who had applied for government jobs asking what they should do.

“People are struggling, they are spooked by this,” Mr Lynch said.

“People have been told to look out for unusual activity but they don’t know what to look out for.

“Some are worried hackers can steal their identity to get a passport or a bank account.”

Mr Phair said the company holding the data, PageUp, was legally responsible for the breach.

“As we enter an era of more and more data breaches being public, law firms will seek to conduct class actions against those organisations who are the holders of personally identifying information, seeking damages for their lack of care, custody and control,’ he said.