This episode outlines a privacy commissioner's investigation of a data breach at the Bank of Montreal