The breach, which happened in 2016 and which was covered up by the firm, was only revealed this month.
Continue reading…