The reporting duty tracks the sensitivity of the record. The security expectation tracks the sector of the company.
No antivirus since April, a refused $300,000 demand, and a count that went from zero to 42 million over nine months.
One phishing email, nine months of movement, the whole warehouse. The sector’s reference breach, and the numbers in it do not expire.