Do I have to tell the customers whose data leaked?
Here is the free check that answers this for your organisation.
Breach readiness and reporting triage
Tells you whether this is reportable, to whom, and how long you have left on the clock.
Start — you will need an organisation code (we can make one)