This has happened. I work in engineering. The saying goes that everything has a mean time to failure. Everything will eventually break. That means the security of your party's systems, my party's systems, and all the party systems will eventually be broken into. It's just a matter of statistics. What are the procedures in place to make sure that all our parties are adhering to the best standards? I think the answer is that the Privacy Commissioner needs to have mandates to go in and review us.
On June 7th, 2018. See this statement in context.