2 ms·

If they can't measure the scope of the breach they must notify all customers that they might have been affected.