The Office of the Privacy Commissioner explained to the IJF that the figure of 2.2 million affected individuals was “a preliminary estimate,” although that number was recorded following reports from three federal institutions and six months after the breach initially occurred. The watchdog itself did not investigate the incident.
In an email to the IJF, the RCMP reiterated that, “while there was no indication that any personal information was viewed or extracted, it is not possible to confirm that it was not accessed.”
