Reply to post:

I notified a government agency of a breach it had made earlier this year, and said they need to file a report. However there appears to be no mechanism for verifying whether or not such a report has been made. The published report lists five sectors without defining what all the sectors it considers might be. It would be edifying to always have the stats on government agencies.