Our consultancy business has quite a diverse client base. Over the weekend, the laptop of one of our employees was stolen. The laptop contains personal information of our clients and it appears that it was not password protected making the data accessible. Will this be a data breach in terms of POPIA, and if so, what are we required to do?