Well now that they've fixed it, I guess I can say where I saw the error. The error was on the Financial Ombudsman website in Australia in their online dispute

Well now that they've fixed it, I guess I can say where I saw the error. The error was on the Financial Ombudsman website in Australia in their online dispute form. The reason why this concerned me was that some of the information they need to collect included things like bank account numbers - so having this information sent insecurely to the Ombudsman was (imho) a big no-no. I guess I finally managed to get through to someone who can fix it after I sent emails directly to the chief Financial Ombudsmen explaining exactly why it was an issue, with screenshots showing exactly where the problems were (I highlighted the appropriate parts) and an example explaining exactly how someone could use this information to engineer someone's account passwords out of them easily. Thankfully its all fixed now.