What I can tell you about it is that, yes, when there was a breach in 2016, every user whose personal data had been obtained by third parties was notified. I can't tell you what the exact mechanism was, but I could provide you with that information later.
