The Australian Communications and Media Authority says a coding error on a dormant website that went undetected for four years was behind a massive data breach that exposed the information of close to 10 million Optus customers, with the regulator saying the hack was “not highly sophisticated”.