Litigants in at least 146 court matters were potentially involved in a data breach that is now the subject of a formal complaint with the privacy commissioner in Canada, Senate estimates has been told.