A father jailed for violently attacking his sons was accidentally handed a confidential court report by Victoria's child protection agency containing the exact location of the other children removed from his care due to abuse and neglect.

The major security breach has prompted the Department of Health and Human Services to undertake a risk assessment in consultation with police, and it has offered to pay for a sophisticated security system at the carers' home in country Victoria.

Leaked documents reveal the department's settlement offer, conditional on the carers signing a confidentiality clause, was for the installation of infrared security cameras and motion detector flood lighting worth more than $4000.

The carers had asked for compensation and financial assistance to move to a new rental property in the event the father came to their home, but the department rejected their request.

"The department does not agree to cover the cost of relocation should you move from your current residential address in the event [the father] attended your home," a DHHS senior staffer wrote. "In the event [he] attends your current residential address, the department will investigate the matter and take the necessary steps to ensure the safety of the children and yourselves."

Fairfax Media has confirmed DHHS gave the father a confidential Children's Court file that included the carers' home address and phone number as well as the names and mobile numbers for the two traumatised children's counsellors and doctor.

The children are on an undisclosed placement, meaning the father was not allowed to know where they lived. Undisclosed placements are ordered when a child's safety is in jeopardy or when caregivers are at risk of violence from parents. Often their mail is redirected through their foster care agency.

The father, who has a number of children who have all been under state care, is described in DHHS documents as a man who relies on physical punishment for discipline. He has not seen the children in question for years but is fighting an application for them to be placed with the foster carers long-term. He has previously been convicted for violent assaults against his children.

Director of Kinship Carers Victoria, Anne McLeish, said the privacy breach put the foster family at "extreme risk" and that a solution had still not being agreed to despite weeks of talks with DHHS.

"We can understand human error and forgive it, especially since the pressures on DHHS staff seems to be building day by day," she said. "However, this family is now fearful and [they] should be our first concern."

Ms McLeish called on the state government to reassure all Victorian carers that this was an isolated incident and that procedures were in place to protect them should other breaches occur.

The government said security breaches were rare but legal sources have told Fairfax Media they are becoming more common. Lawyers said there had been a number of compensation claims over DHHS breaches involving foster carers, most settled confidentially, and that recent changes to the child services' database that caseworkers use to generate court reports left more children exposed.

"It happens all the time," Children's Court solicitor Liz Dowling said. "I've gone to the department and told them about breaches in their reports. It's usually a typographical error but it's a bigger issue than just in this instance. Social workers are told at the last minute to prepare a report in relation to a matter and they press a button which results in all these details coming out."

The state's peak body for carers, the Foster Care Association of Victoria, said breaches occurred when caseworkers did not forensically check what was being included in DHHS reports.

"Absolutely, they occur," chief executive Katie Hooper said. "Carers hope that the system has taken steps to avoid this. But I think that's a big hope."

Another Children's Court lawyer said there had been "several occasions" when court reports produced by the department contained pre-populated "confidential and highly sensitive information".

A Department of Health and Human Services spokeswoman said strict policies about the handling and sharing of sensitive information were in place, and that client confidentiality was taken "very seriously, with client safety the utmost priority".

She said privacy breaches were always investigated and, where appropriate, a forensic security audit undertaken. "In the rare cases where breaches of privacy occur due to human error, the staff involved are counselled and processes are reviewed to identify any opportunities for improvement."

In the case identified by Fairfax Media, the spokeswoman said the department was investigating and would take action to prevent the breach from happening again.

She said the government was working with the family and police to ensure their safety and to find a solution. She also apologised for the wording in the letter rejecting the carer's proposal, which she said "does not reflect the department's approach to this issue".

A spokeswoman for Families and Children Minister, Jenny Mikakos​, said she expects DHHS will review its processes following this breach.

Deb Tsorbaris, chief executive of the Centre for Excellence in Child and Family Welfare, said the department was likely to be watching this case closely.

"I would be very surprised if the department didn't do everything it could do, even if it was relocating these foster carers if it came to that," she said.

Fairfax Media approached the foster carers but they declined to comment.

*Some details have been changed to protect the identity of foster carers and children

Do you know more? Email beau.donelly@fairfaxmedia.com.au