I recently had issues with my Huge NZ Corporation account and so have been exchanging emails.
In a reply to me, they attached someone else's bill complete with their names, address, phone number, services provided, costs, and so on. I told them about this and asked whether they considered this a notifiable breach, what their processes were for dealing with privacy breaches, and how they would ensure it didn't happen again.
Two days later I got a reply. They apologised and said they'd removed the other person's bill from our exchanges and told their manager about the mistake. They also said it had been several years since they'd last made that mistake so I didn't have to worry about its b