A data breach can result in the exposure of private customer information (credit card information, social security numbers, email addresses, etc.) to unknown third parties who may fraudulently use that information. In instances where the information is used fraudulently, the customer suffers a harm that can usually be quantified or measured in some way.
But