Quebec-based financial data breach affects millions