“We take our responsibility to protect our members’ personal information seriously, and we sincerely regret that this incident occurred,” wrote the University of Ottawa Students’ Union in an incident notice.