SPS reported the breaches to the commissioner after learning that nine people's personal information had been inappropriately accessed.