Under the Personal Information Protection and Electronic Documents Act, it is mandatory for companies to report breaches to the privacy commissioners office
information
The Ottawa-based tech firm says it terminated the employees’ access to its network and referred the data breach to law enforcement