This report provides a detailed analysis of the cyber security risks, threats, and vulnerabilities associated with the Australian Red Cross Blood Donor system, stemming from a 2016 data breach. The report assesses the potential impact of the breach, where the personal information of approximately 555,000 prospective blood donors was exposed due to human error. It further examines the business requirements of the Australian Red Cross in light of the incident, emphasizing the need for improved data protection measures, employee training, and adherence to privacy regulations. Recommendations include secure data storage, limited data retention, and regular risk assessments to prevent future breaches and maintain donor trust. The report concludes that addressing these vulnerabilities is crucial for the organization's reputation and continued operation.