You have to figure out, did they get to client data? If you’re assuming yes, you do have an obligation to contact the client."

Kimberly Foss, founder, Empyrion Wealth Management.