A confirmed “privacy incident” at Sobeys