Centrelink bungle sees private documents shared