Used memory sticks being sold on the internet have been found to contain sensitive Australian government data, according to a new study.