Disclosure of this type of data can expose a company to criminal, civil and reputational liability. A data leak would also mean a number of unplanned expenses for the company related to: identifying victims, informing those affected by the data leak and the need to provide them with certain services, PR activities, legal services, loss of customers (and issues connected with acquiring new ones) and loss of reputation.