Mr. Luc Jarry at the Public Safety and National Security Committee

That depends on the kind of attack. If the attack affected personal information, then absolutely, we'd have to report the incident.