The Australian health authority believed it had "anonymised" a data-set of patient histories, but academics were easily able to unscramble it