City of Ballarat privacy nightmare: resident details posted online