When Joshua was 15, he triggered one of Western Australia’s most significant public health data breaches. Joshua, who is autistic, said he was tinkering with a radio scanner in his bedroom when he intercepted some unencrypted frequencies. After decoding them, he uploaded the data to a 400-page website he built, exposing sensitive information — including patient and staff names, contact details and hospital communications — during the height of the COVID-19 pandemic.