ICBC must pay $15K to all who had data breached before JIBC