We've been in touch with the CRA in the context of this investigation and since, but we received the formal breach notification only in May. Our exchanges have been good and collaborative, but the concern is the delay in providing that formal response and those details to us as per the policy.
