Consider the following statements about Section 72 (breach of confidentiality and privacy): 1. It applies to persons who have secured access to information in the course of exercising powers under the IT Act. 2. Disclosure of such information without consent is punishable. 3. It applies irrespective of whether access was obtained under the Act or through unauthorised hacking. Which of the above are correct according to the IT Act, 2000?