Private member information from a union super fund was passed on to a union, a royal commission has been told.

An internal investigation at a union super fund failed to uncover how members’ phone numbers and home addresses ended up in the hands of union officials, a royal commission has been told.

Queensland company Lis-Con complained after people posing as CBUS staff “threatened and intimidated” its employees.

Staff from superannuation fund CBUS told the Royal Commission into Trade Union Governance and Corruption they don’t know who sent private contact information to the Construction Forestry Mining and Energy Union (CFMEU).

CBUS executive team member Maria Butera said an internal investigation was ordered after Lis-Con complained about its employees being contacted.

Counsel assisting commission, Jeremy Stoljar SC, asked Ms Butera why the investigation was limited to just one employee’s emails.

“The CEO instructed me to do something, and I did it. In our world, that’s what we do,” Ms Butera told the commission in Melbourne on Monday.

A KPMG audit found 68 examples over 17 months where members’ private information was exposed to people outside the fund.

Earlier, Lisa Zanatta, a coordinator at CBUS, said she was given more private information than she asked for when asked to access Lis-Con’s superannuation payments.

That information, including phone numbers and home addresses, ended up with the CFMEU’s NSW branch.

John Agius SC, representing the CFMEU also asked commissioner Dyson Heydon to investigate possible leaks from the commission, after evidence collected in private hearings was leaked to the media last week.

Mr Agius said the information could only have come from someone working within the royal commission who had access to private documents.

Commission chief executive Jane Fitzgerald said the leaks had not come from within the commission.

Commissioner Heydon rejected the application.

The commission’s public hearings will continue in Melbourne on Tuesday