1. Making your own assessment, does the breach involve the personal data of living individuals?