There are thousands of taxpayers affected, though. If this breach occurred outside of government, there are obligations for those organizations to inform the public. Why is it that this breach was not publicized? Worse, why was it withheld from the Privacy Commissioner until after the deadline passed for him to include it in his report in 2024?
On November 21st, 2024. See this statement in context.