US board portal Diligent wrote to a number of Australian directors last week to advise that their data may have been stolen.