. . . "and data protection requirements to address ongoing threats, we may be required to expend significant capital and other resources to protect against potential security breaches or to alleviate problems caused by security breaches." .