<p>Sensitive personal data was involved, but there is no evidence it was shared with third parties</p>