I don't know. The Privacy Commissioner has stated that he has opened an investigation into the matter, and I'm not going to comment on his ongoing investigation. I will say that federal departments will co-operate fully with the Office of the Privacy Commissioner and that I took steps in this current process both in terms of limiting the number of people who had access to the process within my department, as well as segregating the server and doing everything securely that we needed to do to make sure that there was no breach of privacy from my department.
On July 25th, 2019. See this statement in context.