Re: "the matter had become the subject of a police investigation. "
Full marks to BUPA for coming clean and notifying the affected people. Getting the cops involved would possibly lower the chance of a company 'fessing up to this kind of breach. I guess there are no right answers here.
