French articles below, TLDR : Since September 22nd, doing business in Quebec requires disclosure to government. The enterprise disclosed a "confidentiality incident" without details. People are talking under cover of anonymity since internal policies forbid discussing such incidents in public.

https://www.journaldemontreal.com/2022/11/10/sobeys-bel-et-b...

https://www.journaldemontreal.com/2022/11/09/cyberattaque-ch...

https://www.journaldemontreal.com/2022/11/07/sobeys-victime-...